Exporting YARA Rule Files

Procedure

1. Go to Threat Intelligence → Custom Intelligence → YARA Rules.
   The YARA Rules screen appears.
2. Do one of the following to export the YARA rule files:
   • To export all YARA rule files, click Export without selecting any YARA rule files.
   • To export specific YARA rule files, select the YARA rule files to export and click Export Selected.
   Deep Discovery Director (Internal Network Analytics Version) creates a ZIP archive with the YARA rule files.

   Note Regardless of the original encoding used when the YARA rule files were imported, exported YARA rule files will always use UTF-8 encoding.

3. Download and save the ZIP archive.