https://github.com/mtrnord/matrix-yararules

Some safe for public yara rules that can be used in Matrix
https://github.com/mtrnord/matrix-yararules

Last synced: about 21 hours ago
JSON representation

Some safe for public yara rules that can be used in Matrix

• Host: GitHub
• URL: https://github.com/mtrnord/matrix-yararules
• Owner: MTRNord
• Created: 2023-09-27T23:41:28.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-10-23T10:30:57.000Z (over 1 year ago)
• Last Synced: 2024-11-25T02:05:04.942Z (2 months ago)
• Language: YARA
• Size: 12.7 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Public Base Rules for YARA in Matrix

These are rules that are considered to be safe to publish to the public. They are not considered to be sensitive in nature and are not considered to be a risk to the organization if they are published.

These rules are made to be used for [Matrix](https://matrix.org) messages in conjunction with the Draupnir Bot and the yara protection.

This repository is following the  spec as best as possible.

Additionally there is the `Action` metadata which is used to determine what action to take when a rule matches. The following actions are supported:

- `Notify` - Notify the admins in the admin room about a match

- `RedactAndNotify` - Redact the message and notify the admins in the admin room about a match. In combination with the `NotifcationText` metadata

this also notifies a user in the room about the match with the defined message.