Search code examples
windowsyara

Using YARA in windows machine WAZUH

Is there any Yara integration with WAZUH tutorial for windows I can refer to. Since running the yara.exe didnt have any effect on my windows machine.

Solution

  • There is a blog post explaining how to detect LockBit 3.0 which covers Yara configuration on Windows as well.

    https://wazuh.com/blog/detecting-lockbit-3-0-ransomware-with-wazuh/

    Hope this helps!