YARA Rules Parent topic

TippingPoint Advanced Threat Protection for Email uses YARA rules to identify malware. YARA rules are malware detection patterns that are fully customizable to identify targeted attacks and security threats specific to your environment.
TippingPoint Advanced Threat Protection for Email supports a maximum of 5,000 enabled YARA rules regardless of the number of YARA rule files. On the top-right corner of the YARA rule table, the Rules in use field indicates the number of YARA rules currently enabled in the system.
The following table shows information about YARA rule files.

YARA Rules

Field
Description
File name
Name of the YARA rule file.
Risk level
Risk level of the YARA rules.
Rules
Number of YARA rules contained in the YARA rule file.
Files to analyze
File types to analyze using the YARA rules in the YARA rule file.
Added
Date and time the YARA rule file was added.
Status
Toggle to enable or disable the YARA rule file.
Related information