Uploading valid Yara rules file fails, and you can't enable custom Yara scanner

Technical Articles ID: KB94044
Last Modified: 2023-02-24 09:19:28 Etc/GMT

Environment

Trellix Intelligent Sandbox (IS)
Advanced Threat Defense (ATD)

Problem 1

When you try to upload a valid Yara rules file for your Yara scanner to ATD or IS, you see the following error:

Invalid Custom YARA Scanner file. Please check system log for more details

Problem 2

You see the following error message when you try to enable Custom Yara Scanner in the Analyzer Profile setting.

Custom YARA Scanner file is missing, please upload from Content Update

Cause

The configuration file in the ATD or IS system back-end has a value missing from the Yara settings.

Solution

If you experience this issue, perform the steps below:

Generate a support bundle from your affected appliance.
Contact Technical Support at Trellix.
Upload the support bundle to Service Request.
Request a remote session to address the back-end file and quote this article number.

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Related Information

4.2, 4.4, and 4.6 support Yara 3.1.
4.8, 4.10, 4.12, 4.14, and 5.0 support Yara 3.8.
Always make sure that you follow the syntax of the supported Yara version when composing your Yara rules file.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Uploading valid Yara rules file fails, and you can't enable custom Yara scanner

Environment

Problem 1

Problem 2

Cause

Solution

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Uploading valid Yara rules file fails, and you can't enable custom Yara scanner

Environment

Problem 1

Problem 2

Cause

Solution

Related Information

Affected Products

Languages:

Choose your region

Title

Title