Agent skill
Experiment design partner
Translate a hypothesis into an interpretable test with metrics and guardrails.
ClaudeCodexOpenClawData & Analytics
Dave AI
YARA Rules Skill
YARA rule creation, testing, and deployment
instructions.md
--- name: yara-rules-skill-2ad6d7f1598b description: YARA rule creation, testing, and deployment allowed-tools: - Bash - Read - Write - Edit - Glob - Grep graph: domains: [domain:cybersecurity] specializations: [specialization:security-research] skillAreas: [skill-area:threat-intelligence-hunting, skill-area:endpoint-security-edr] roles: [role:security-engineer] workflows: [workflow:vulnerability-management, workflow:penetration-testing-cycle] --- # YARA Rules Skill ## Overview This skill provides capabilities for YARA rule creation, testing, and deployment for malware detection and threat hunting. ## Capabilities - Generate YARA rules from samples - Validate YARA rule syntax - Test rules against sample sets - Optimize rules for performance - Create rule metadata and documentation - Support YARA modules (PE, ELF, etc.) - Integrate with VirusTotal YARA - Generate Sigma rules for correlation ## Target Processes - malware-analysis.js - threat-intelligence-research.js - security-tool-development.js ## Dependencies - YARA CLI - yara-python library - VirusTotal API (optional) - Sample malware corpus (for testing) ## Usage Context This skill is essential for: - Malware detection rule development - Threat hunting operations - IOC-based detection - Malware family classification - Automated sample triage ## Integration Notes - Rules can be tested against known good/bad samples - Performance metrics help optimize detection speed - Supports rule versioning and documentation - Can export to multiple detection platforms - Integrates with YARA-L for Chronicle--- name: yara-rules-skill-2ad6d7f1598b description: YARA rule creation, testing, and deployment allowed-tools: - Bash - Read - Write - Edit - Glob - Grep graph: domains: [domain:cybersecurity] specializations: [specialization:security-research] skillAreas: [skill-area:threat-intelligence-hunting, skill-area:endpoint-security-edr] roles: [role:security-engineer] workflows: [workflow:vulnerability-management, workflow:penetration-testing-cycle] --- # YARA Rules Skill ## Overview This skill provides capabilities for YARA rule creation, testing, and deployment for malware detection and threat hunting. ## Capabilities - Generate YARA rules from samples - Validate YARA rule syntax - Test rules against sample sets - Optimize rules for performance - Create rule metadata and documentation - Support YARA modules (PE, ELF, etc.) - Integrate with VirusTotal YARA - Generate Sigma rules for correlation ## Target Processes - malware-analysis.js - threat-intelligence-research.js - security-tool-development.js ## Dependencies - YARA CLI - yara-python library - VirusTotal API (optional) - Sample malware corpus (for testing) ## Usage Context This skill is essential for: - Malware detection rule development - Threat hunting operations - IOC-based detection - Malware family classification - Automated sample triage ## Integration Notes - Rules can be tested against known good/bad samples - Performance metrics help optimize detection speed - Supports rule versioning and documentation - Can export to multiple detection platforms - Integrates with YARA-L for Chronicle
Platform guidance
Imported from the listed AgentSkill.sh category. Complete supplied package files and notices are retained. Required external tools and credentials are not installed. No bundled code was executed during import. Individual agent task behavior has not been tested.