mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-24 21:40:58 +03:00
Initial commit - 611 cybersecurity skills across all subdomains
This commit is contained in:
@@ -0,0 +1,34 @@
|
||||
# YARA Rule Development Workflows
|
||||
|
||||
## Workflow 1: Sample-Driven Rule Creation
|
||||
```
|
||||
[Malware Sample] --> [Static Analysis] --> [Extract Unique Strings] --> [Draft Rule]
|
||||
|
|
||||
v
|
||||
[Test Against Samples]
|
||||
|
|
||||
v
|
||||
[Test Against Clean Files]
|
||||
|
|
||||
v
|
||||
[Deploy to Production]
|
||||
```
|
||||
|
||||
## Workflow 2: Family-Wide Detection
|
||||
```
|
||||
[Multiple Samples] --> [Cross-Sample Analysis] --> [Find Common Patterns]
|
||||
|
|
||||
v
|
||||
[Build Generic Rule]
|
||||
|
|
||||
v
|
||||
[Validate Coverage]
|
||||
```
|
||||
|
||||
## Workflow 3: Threat Hunt Integration
|
||||
```
|
||||
[Intelligence Report] --> [Extract IOCs] --> [Convert to YARA] --> [Retrohunt]
|
||||
|
|
||||
v
|
||||
[Triage New Matches]
|
||||
```
|
||||
Reference in New Issue
Block a user