From 842c4f34fac823558f21e1265a8d144e03eed2a8 Mon Sep 17 00:00:00 2001 From: "Namhyeon, Go" Date: Tue, 10 Sep 2024 14:51:11 +0900 Subject: [PATCH] Updated File Event Monitor (markdown) --- File-Event-Monitor.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/File-Event-Monitor.md b/File-Event-Monitor.md index 7593b1a..9fa14e9 100644 --- a/File-Event-Monitor.md +++ b/File-Event-Monitor.md @@ -76,6 +76,10 @@ WelsonJS can be utilized in conjunction with [MITRE ATT&CK](https://attack.mitre * C:\Windows\SystemTemp * C:\User\\AppData\Local\Temp +#### YARA signature matching + +WelsonJS has a [YARA signature matching (github.com/VirusTotal/yara)](https://github.com/VirusTotal/yara) scenario for file events. The code will be released soon. + ## Contact me - abuse@catswords.net - ActivityPub [@catswords_oss@catswords.social](https://catswords.social/@catswords_oss)