Views:

The YARA rule files can be exported for use in other YARA compatible products.

  1. Go to Threat Intelligence > Custom Intelligence > YARA Rules.

    The YARA Rules screen appears.

  2. Do one of the following to export the YARA rule files:
    • To export all YARA rule files, click Export without selecting any YARA rule files.

    • To export specific YARA rule files, select the YARA rule files to export and click Export Selected.

    Deep Discovery Director (Internal Network Analytics Version) creates a ZIP archive with the YARA rule files.

    Note:

    Regardless of the original encoding used when the YARA rule files were imported, exported YARA rule files will always use UTF-8 encoding.

  3. Download and save the ZIP archive.