Skip to content

Commit 81dd3a4

Browse files
committed
update
1 parent d8eee63 commit 81dd3a4

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
We changed the text in the string $a as shown in the eicaryara rule we wrote, from X5O to X50, that is, we replaced the letter O with the number 0. The condition for the Yara rule is $a and $b and $c and $d. If we are to only make a change to the first boolean operator in this condition, what boolean operator shall we replace the 'and' with, in order for the rule to still hit the file?
2+
Answer format: **
3+
What option is used in the Yara command in order to list down the metadata of the rules that are a hit to a file?
4+
5+
Answer format: **
6+
What section contains information about the author of the Yara rule?
7+
8+
Answer format: ********
9+
What option is used to print only rules that did not hit?
10+
11+
Answer format: **
12+
Change the Yara rule value for the $a string to X50. Rerun the command, but this time with the -c option. What is the result?
13+

0 commit comments

Comments
 (0)