> The report also contains a pretty useless firewall rule For what it's worth Yara is not a firewall. It's essentially an intelligent grep for incident respons

> The report also contains a pretty useless firewall rule For what it's worth Yara is not a firewall. It's essentially an intelligent grep for incident response. An IOC is an indicator of compromise, so it's after the fact not a preventative measure. http://virustotal.github.io/yara/ http://virustotal.github.io/yara/