genian-edr-validate-yara-rule
Checks the syntax of a YARA rule with the console's validator without saving it.
genian-edr-validate-yara-rule [profile=VALUE] rule=VALUE
- profile=VALUE
- Optional. Genian EDR connect profile name. Every Genian EDR profile is queried when omitted.
- rule=VALUE
- Required. YARA rule text
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| is_valid | Boolean | Valid | e.g. false. Whether the rule passed. |
| msg | String | Message | e.g. line 0: syntax error, unexpected end of file, expecting <condition>. Validator message for a failed rule. |