Discussions Sophos Central + YARA

Sophos Central requires membership for participation - click to join

Thread Info

State Not Answered
Replies 2 replies
Subscribers 9 subscribers
Views 1789 views
Users 0 members are here

Options

Suggested

Sophos Central + YARA

Mansoor Ahmad 2 months ago

As residents of Saudi Arabia, SAMA provides us with YARA rules for threat detection.

How can we effectively create and implement our own query within Sophos Central to scan for these YARA rules?

What are the best practices and challenges associated with this process?

Edit Tags
[edited by: GlennSen at 2:48 PM (GMT -7) on 3 Sep 2024]

Top Replies

Qoosh 2 months ago +1

Hi Mansoor , Thanks for reaching out to the Sophos Community Forum. I suggest proceeding with some of the steps highlighted in this blog post highlighting YARA Scanning rules with Sophos XDR . Let…

0 Qoosh 2 months ago

Hi Mansoor,

Thanks for reaching out to the Sophos Community Forum.

I suggest proceeding with some of the steps highlighted in this blog post highlighting YARA Scanning rules with Sophos XDR.

Let me know if this helps.

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Mansoor Ahmad 2 months ago in reply to Qoosh

Hi Kushal, I am so glad that replied - Thank you.

I've Seen This Blog Port, However As I am New In Cybersecurity. Still Taking Baby Steps. Hope You Understand My Situation.

That Is Why Looking For Step By Step Guide.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel