YARA Rulesets

YARA rulesets objects

A YARA Ruleset objects represents one of the rulesets used in our crowdsourced YARA results. It has the following attributes:

  • name: <string> ruleset name.
  • rules: <string> string containing the ruleset file.
  • source: <string> repository the ruleset was downloaded from.
{
  "data": {
    "attributes": {
      "name": "<string>",
      "rules": "<string>",
      "source": "<string>"
    },
    "id": "<string>",
    "links": {
      "self": "https://www.virustotal.com/api/v3/yara_rulesets/<id>"
    },
    "type": "yara_ruleset"
  }
}
{
  "data": {
    "attributes": {
      "name": "evilness",
      "rules": "/*\n    Template YARA ruleset\n*/\nrule yara_template\n{\n    strings:\n        $a = \"VirusTotal\"\n    condition:\n        all of them\n}",
      "source": "https://example.com/evil/ruleset"
    },
    "id": "000abc43",
    "links": {
      "self": "https://www.virustotal.com/api/v3/yara_rulesets/000abc43"
    },
    "type": "yara_ruleset"
  }
}