THREAT OPS › Threat News › YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules
YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules
<p>In recent years, fileless malware and obfuscation techniques have made it increasingly difficult to detect suspicious activity by scanning files alone. To counter these threats, security researchers and malware analysts actively create and publish detection rules such as Sigma and YARA. <br /> However, many existing endpoint security tools rely on unique detection engines, instead of directly u
MITRE ATT&CK techniques
Indicators of compromise
- 45.32.116.146ipv4
Original source: https://blogs.jpcert.or.jp/en/2025/11/YAMAGoya.html