i do not know the theory of cuckoo ，““malicious executable could contain the domain name ciphered or obfuscated”” ，what' the theory? i think yara scan a process may work,how yara scan a file static work? ,i think i should explain clear 0.0
-- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to yara-project+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
