Diaries by Keyword - SANS Internet Storm Center

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Handler on Duty: Rob VandenBrink

Threat Level: green

Date	Author	Title
2023-09-24	Didier Stevens	YARA Support for .LNK Files
2023-04-22	Didier Stevens	YARA v4.3.1 Release
2023-04-07	Xavier Mertens	Detecting Suspicious API Usage with YARA Rules
2023-04-02	Didier Stevens	YARA v4.3.0 Release
2023-03-02	Didier Stevens	YARA: Detect The Unexpected ...
2023-02-01	Didier Stevens	Detecting (Malicious) OneNote Files
2023-01-07	Didier Stevens	YARA v4.3.0-rc1 --skip-larger
2022-12-31	Didier Stevens	YARA v4.3.0-rc1 --print-xor-key
2022-08-20	Didier Stevens	YARA 4.2.3 Released
2022-07-02	Didier Stevens	YARA 4.2.2 Released
2022-04-30	Didier Stevens	YARA 4.2.1 Released
2022-03-13	Didier Stevens	YARA 4.2.0 Released
2022-02-20	Didier Stevens	Video: YARA's Console Module
2022-01-30	Didier Stevens	YARA's Console Module
2021-11-28	Didier Stevens	Video: YARA Rules for Office Maldocs
2021-11-25	Didier Stevens	YARA's Private Strings
2021-11-23	Didier Stevens	YARA Rule for OOXML Maldocs: Less False Positives
2021-07-03	Didier Stevens	Finding Strings With oledump.py
2021-05-30	Didier Stevens	YARA Release v4.1.1
2021-04-03	Didier Stevens	Video: YARA and CyberChef
2021-02-21	Didier Stevens	DDE and oledump
2021-02-06	Didier Stevens	YARA v4.0.5
2021-01-31	Didier Stevens	YARA v4.0.4
2020-12-10	John Bambenek	Writing Yara Rules for Fun and Profit: Notes from the FireEye Breach Countermeasures
2020-06-27	Didier Stevens	Video: YARA's BASE64 Strings
2020-06-14	Didier Stevens	YARA's BASE64 Strings
2020-05-30	Didier Stevens	YARA v4.0.1
2020-05-10	Didier Stevens	YARA v4.0.0: BASE64 Strings
2019-10-14	Didier Stevens	YARA's XOR Modifier
2019-10-12	Didier Stevens	YARA v3.11.0 released
2018-10-07	Didier Stevens	YARA XOR Strings: Some Remarks
2018-10-06	Didier Stevens	YARA: XOR Strings
2018-10-01	Didier Stevens	Developing YARA Rules: a Practical Example
2017-10-24	Xavier Mertens	Stop relying on file extensions
2017-01-30	Didier Stevens	py2exe Decompiling - Part 2
2016-05-21	Didier Stevens	Python Malware - Part 2
2016-01-13	Alex Stanford	You Have Got a New Audio Message - Guest Diary by Pasquale Stirparo
2016-01-01	Didier Stevens	Failure Is An Option
2015-12-17	Alex Stanford	When Hunting BeEF, Yara rules (Part 2)
2015-03-30	Didier Stevens	YARA Rules For Shellcode
2015-03-17	Didier Stevens	From PEiD To YARA