Write a YARA Rule
forensics · hard · +55 XP
Target
GET /api/lab/yara-101/samples (4 base64-encoded binary fragments + labels)
POST /api/lab/yara-101/submit body {rule} (the rule's full text)
Goal: write a YARA rule that matches both sample_b and sample_d but NEITHER of sample_a and sample_c. Our mini-engine supports $str = "..." and condition: any/all of them. Submit the full rule text. False positives or false negatives fail the check.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/yara-101/
// reuse on the cli
// submit flag
// no solves yet
2 of 13 · forensics