NEW Open Source Malware/Malicious Code & Content Endpoint YARA Rules Available in NetWitness LIVE!

[Will_G]

Hi All, 

I am pleased to share with you that today the NetWitness Threat Research and Intelligence Content team upload 518 YARA Rules to the NetWitness LIVE CMS. The rules in question can be found within the ‘COMMUNITY’ section of LIVE and focus on Malware/malicious code & content detection and identification in addition to APT-centric malware and tooling. These rules were collected via open sources and as such are not guaranteed by RSA Security or NetWitness. However, it is our belief that these rules can and will aid in advancing the practical and theoretical defensive strategies of our customers – both internal and external to the business. Should you have any questions regarding these rules please feel to reach out to me.

[AbdelrahmanMoha]

Dear Will, 

Could you please advise how we can get these Rules from the live since when I checked it seems it is not available? and if their is any requirement that we need to enable 

Thanks.

[EdPadilla]

any updates, or explanation or discussion?