Skip to content

Releases: CIRCL/factual-rules

Factual rules version 1.0 released

18 Jan 10:14
v1.0
310ff20
Compare
Choose a tag to compare

Factual rules version 1.0 released

Factual rules are YARA rules to find legitimate software on raw disk acquisition. The goal of the software is to be able to use a set of rules against collected or acquired digital forensic evidences and find installed software in a timely fashion. All the rules are generated using factual-rules-generator.

The source code for generating automatically rules is released as open source as factual rules generator.