When creating your rules for YARA keep in mind the following guidelines in order to get the best performance from them. This guide is based on ideas and recommendations by Victor M. Alvarez and WXS.
- Revision 1.3, October 2019, applies to all YARA versions higher than 3.7
- Bad: Regular Expressions