Resources

YARA-X’s 1.20.0 release brings 14 improvements and 13 bugfixes. One new CLI option is –ignore-invalid-rules that allows one to skip rules that fail to compile.   There have also been new […]

Microsoft Access files (Microsoft Office’s Database) can contain VBA code. But they are not ole or OOXML files. You can’t analyze them with oledump.py: Neither do they contain an embedded […]

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.