Skip to content

Receiving error with yara rules #27

Description

I'm looking for some help with an error I'm seeing in the logs.

`line 23, in _load_yara_rules
SyntaxError: C:\Users(path)\apt_ta17_318A.yar(88): invalid field name "imphash"

2018-08-08 13:52:56,358`

The file changes to a new one as I remove the yara rule.
I am running as administrator.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions