Yara

Binary Rename 2

Main area: Detection Engineering · 627 words · 3 min read

Compare YARA and PowerShell approaches to finding renamed executables on disk, with code examples and detection limitations.

• DFIR
• PowerShell
• YARA
• Detection