YARA Rules 201: Cross-Platform Detection Techniques

Building on our introduction to fundamentals in YARA Rules 101, this advanced session dives into creating high-efficacy rules for varied computing architectures and execution environments.

We’ll explore platform-specific YARA techniques, examine how code formats impact signature strategies, and demonstrate practical methods for maintaining accuracy across diverse threats.

In this session, you'll learn:

• Platform-aware signature approaches across instruction sets and memory layouts
• Masking techniques to handle code variation without reducing accuracy
• How to detect cross-platform infostealers with differing signatures
• Hands-on building techniques using dnSpy and JetBrains disassemblers.

Whether you're focused on native malware or .NET threats, you'll leave with actionable strategies to strengthen your detection efforts.

Watch Now