matrix-yararules

Some safe for public yara rules that can be used in Matrix
git clone git://archive.git.mtrnord.blog/MTRNord/matrix-yararules.git
Log | Files | Refs | README

README.md (933B)

      1 # Public Base Rules for YARA in Matrix
      2 
      3 These are rules that are considered to be safe to publish to the public. They are not considered to be sensitive in nature and are not considered to be a risk to the organization if they are published.
      4 
      5 These rules are made to be used for [Matrix](https://matrix.org) messages in conjunction with the Draupnir Bot and the yara protection.
      6 
      7 This repository is following the <https://github.com/CybercentreCanada/CCCS-Yara.git> spec as best as possible.
      8 
      9 Additionally there is the `Action` metadata which is used to determine what action to take when a rule matches. The following actions are supported:
     10 
     11 - `Notify` - Notify the admins in the admin room about a match
     12 - `RedactAndNotify` - Redact the message and notify the admins in the admin room about a match. In combination with the `NotifcationText` metadata
     13 this also notifies a user in the room about the match with the defined message.