Bridge Section

Fields

name	type	description
endpoint.analysis.enable	bool	enable endpoint analysis
endpoint.parser.enable	bool	enable endpoint parser
endpoint.data.enable	bool	enable endpoint data
endpoint.reverse.enable	bool	enable endpoint reverse
bridge.focade.analysis.yara.rules.path	string	where should the analysis look for yara's rules
bridge.focade.analysis.av.clamav.database.default_path	string	will contain the clamav database

Only .yarextensions are considered by the yara load, we organize the namespace that each rule loads through the folder name, so if the rule is included in a folder called ransomwares the load will be name - satana.yar, namespace - ransomwares