Browser LabLD-YARA-LAB-003Hard
Browser LabLD-YARA-LAB-003Hard20 min
Artifact Classification (Exam)
Three safe synthetic files: two are the target family, one is a benign lookalike that shares a common string. Design the rule that catches the family and rejects the benign file, and justify it. This is the academy's final assessment.
What you will be able to do
- Select patterns that separate the family from a benign lookalike.
- Justify the classification from evidence.
IOC AnalysisDetection EngineeringT1027 — Obfuscated Files or Information
Sign in to start this lab.
Sign in