Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auto disable noisy rules #11

Open
cooperq opened this issue Sep 16, 2020 · 2 comments
Open

Auto disable noisy rules #11

cooperq opened this issue Sep 16, 2020 · 2 comments
Labels
enhancement New feature or request

Comments

@cooperq
Copy link
Collaborator

cooperq commented Sep 16, 2020

We should disable rules that hit too many false positives or are generally noisy. Not sure if this should be done as part of testing or what though.

@cooperq cooperq modified the milestone: Beta Sep 16, 2020
@cooperq cooperq added the enhancement New feature or request label Sep 16, 2020
@garanews
Copy link

It would be nice select single rule to be disabled.
Example in this moment I need to disable domain.yar rules located under yara-rules/utils/
With yaya edit I can toggle the ruleset 37:
enabled 37 yara-rules Community project with YARA rules
But in this way I am going to disable all rules contained there (almost 2k) and not just the noisy one.

@cooperq
Copy link
Collaborator Author

cooperq commented Mar 24, 2021

Yea I think the way to do this would be to support a ~/.yaya/disabled-rules where you could add the path to specific rules. Or just add an interactive intrace for it in yaya edit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants