The following YARA Rules External APIs are available:
Fetch list of YARA rulesets request
GET
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesetsPOST
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesetsFetch YARA ruleset attributes request
GET
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesets/ruleset_uuid/attributesGET
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesets/ruleset_uuid/fileUpdate YARA ruleset attributes request
PATCH
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesets/ruleset_uuid/attributesUpdate or replace YARA rule file request
PUT
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesets/ruleset_uuid/filePOST
https://<etp_instance_addr>/api/v1/policies/policy_uuid/configuration/rules/yara/rulesets/delete
Important
You need to log in to the Web UI and get the YARA policy UUID.