Top up your Threat Intel Game by using Yara / Dan Demeter / VolgaCTF 2020

Slides: http://archive.volgactf.ru/volgactf_2020/slides/VolgaCTF_2020_Dan_Demeter.pdf Top up your Threat Intel Game by using Yara by Dan Demeter - Security Researcher @ GReAT @_xdanx Creation of YARA dramatically changed the Threat Intel Game by providing a must-have tool for matching, searching and clustering thousands of samples in minutes. By using a C-like syntax, security researchers are able to use the powers of Yara in their daily research. During this presentation I will show some cool tricks that can be used with Yara, how malware samples can be classified and how to improve your hunting