yara

The DASCLI yara command instructs the agent to import YARA rules from a file.

Authentication is required to use this command.

Parameters

dascli yara file_name [force]

file_name

Full path and name of the file that contains the YARA rules.

force

If specified, the import is done, regardless of the YARA version. The YARA file has an included version number. The agent has its own current YARA version. If not forced, the agent will reject an older YARA version.