What is the maximum time range for a match section of a multi-event rule in YARA-L?
Select one that applies, and then click Submit.
- 1 day
- 1 week
- 48 hours
- 72 hours
Questions
What are the special operators that can act on a repeated field value in YARA-L?
What are the special operators that can act on a repeated field value in YARA-L?
Select one that applies, and then click Submit.
- ANY, ALL
- AND, NOT
- ANY, NONE
- OR, NOT
For what kind of field will the nocase operator cause an error?
For what kind of field will the nocase operator cause an error?
Select one that applies, and then click Submit.
- Optional Fields
- String Fields
- Enumerated Fields
- Classless Inter-Domain Routing (CIDR) Fields
In YARA-L, what is the equivalent of #var > 0?
In YARA-L, what is the equivalent of #var > 0?
Select one that applies, and then click Submit.
- $var
- &var
- %var
- $var = 1
Which optional field is required for a multi-event YARA-L rule?
Which optional field is required for a multi-event YARA-L rule?
Select one that applies, and then click Submit.
- Events
- Match
- Outcome
- Options
What are the required sections of a YARA-L rule?
What are the required sections of a YARA-L rule?
Select one that applies, and then click Submit.
- Meta, events, and condition
- Meta, events, condition, and match
- Meta, events, condition, and outcome
- Meta and events