A set of YARA rules for the AIL framework to detect leak or information disclosure. This repository can be used by other tools.
- rules
- kevthehermit via PasteHunter for the initial rule set licensed under the GNU General Public License
- AlienVault-Labs for some additional rules
ail-yara-rules is distributed under the AGPL.
It's quite easy. Fork the repository, add or modify existing YARA rule and make a pull request. Please take a look at the directory name to map the scope of the YARA rule.