Create a YARA rule
POST/detection/yara/sets/:set_id/rules
Compiles content and saves it in a set you own or your team shares. The rule is
yours. A source that does not compile
returns 422 with the compiler errors and nothing is saved. Quota class yara_write.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 413
- 422
- 429
- 500
- 502
- 503
- 504
The new rule.
Response Headers
The minute, hour, and day limits of the governing quota, for example 50;w=60, 500;w=3600, 500;w=86400.
Limit of the governing window.
Requests remaining in the governing window.
Seconds until capacity is available in the governing window.
BAD_REQUEST: a parameter is missing or invalid, or a cursor was reused with different parameters.
MISSING_API_KEY: the x-apikey header is missing.
INVALID_API_KEY (the key is invalid or disabled, or could not be verified) or FORBIDDEN (the key may not use this operation).
NOT_FOUND: the resource does not exist or is not visible to the caller.
SOURCE_TOO_LARGE: the YARA source exceeds 1 MiB.
UNPROCESSABLE_ENTITY: the YARA source does not compile. The message lists up to 10 compiler errors with their lines; nothing is saved.
RATE_LIMIT_EXCEEDED: a quota is exhausted. Wait Retry-After seconds. Rejected requests are not counted.
Response Headers
The minute, hour, and day limits of the governing quota, for example 50;w=60, 500;w=3600, 500;w=86400.
Limit of the governing window.
Requests remaining in the governing window.
Seconds until capacity is available in the governing window.
Seconds to wait before retrying.
INTERNAL_ERROR: an unexpected gateway failure. Retry later.
BAD_GATEWAY: an internal service failed or returned an invalid response. Retry later.
COMPILER_BUSY (the YARA compiler is busy) or RATE_LIMIT_UNAVAILABLE (quota enforcement is temporarily unavailable). Retry shortly.
GATEWAY_TIMEOUT: an internal service timed out. Retry later.