diff --git a/File-Event-Monitor.md b/File-Event-Monitor.md index 7593b1a..9fa14e9 100644 --- a/File-Event-Monitor.md +++ b/File-Event-Monitor.md @@ -76,6 +76,10 @@ WelsonJS can be utilized in conjunction with [MITRE ATT&CK](https://attack.mitre * C:\Windows\SystemTemp * C:\User\\AppData\Local\Temp +#### YARA signature matching + +WelsonJS has a [YARA signature matching (github.com/VirusTotal/yara)](https://github.com/VirusTotal/yara) scenario for file events. The code will be released soon. + ## Contact me - abuse@catswords.net - ActivityPub [@catswords_oss@catswords.social](https://catswords.social/@catswords_oss)