InQuest / InQuest/ThreatKB

Upgrade YARA version

Open
#503 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

dependencies
Dominant language
JavaScript
Stars
104
Forks
17
PR merge metrics
No merged PRs in 30d

Description

YARA on ThreatKB is currently running version 4.1.3. TI team has signatures on deck that require features in newer versions. As it is likely we have customers on versions of YARA < latest, we should aim for version 4.2.0+ across the board if that needs to be done.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points. Start by locating where ThreatKB selects or invokes YARA and where version requirements are defined; verify that YARA is upgraded to at least 4.2.0 across the project and that the pending signatures can use the required features.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.