Detection

Manage your YARA rule sets and rules. Sources are compiled before they are saved.

• GET
  List YARA rule sets/detection/yara/sets

  Rule sets you own or that your team shares.

• POST
  Create a YARA rule set/detection/yara/sets

  Creates a rule set owned by you.

• GET
  Get a YARA rule set/detection/yara/sets/{set_id}

  Quota class yara_read.

• PUT
  Update a YARA rule set/detection/yara/sets/{set_id}

  Replaces the name, description, and visibility.

• DELETE
  Delete a YARA rule set/detection/yara/sets/{set_id}

  Deletes the set and every rule in it.

• GET
  List the rules of a YARA rule set/detection/yara/sets/{set_id}/rules

  Rules in the set that you can see, including their source.

• POST
  Create a YARA rule/detection/yara/sets/{set_id}/rules

  Compiles content and saves it in a set you own or your team shares.

• GET
  Get a YARA rule/detection/yara/rules/{rule_id}

  Quota class yara_read.

• PUT
  Update a YARA rule/detection/yara/rules/{rule_id}

  Replaces the rule.

• DELETE
  Delete a YARA rule/detection/yara/rules/{rule_id}

  Same permissions as updating.

• POST
  Validate a YARA source/detection/yara/validate

  Compiles content without saving it.

• POST
  Test a YARA source against a report/detection/yara/test

  Compiles content and scans one report you can read with it, without saving anything.