Yara

This endpoint will use the rules listed by the configuration

Endpoint:/v1/engine/analysis/scan/yara/fast

This endpoint uses yara scan_fast_bytes, so the first rule that matches it will return with it, max payload size (UINT64_MAX)

Responses -

Successful connection - 200 (Connected)

{
  "status": "connected",
  "message": "Connected successfully",
  "code": 200
}

Data processed

{
    "ns":"rules.yara.malwares.ransomwares",
    "rule":"linux_icefire_ransomware",
    "match_status": 1 // match
}