THREATOPS
THREAT OPSThreat News › YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules

YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules

lowjpcert_blogPublished 2025-11-18

<p>In recent years, fileless malware and obfuscation techniques have made it increasingly difficult to detect suspicious activity by scanning files alone. To counter these threats, security researchers and malware analysts actively create and publish detection rules such as Sigma and YARA. <br /> However, many existing endpoint security tools rely on unique detection engines, instead of directly u

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://blogs.jpcert.or.jp/en/2025/11/YAMAGoya.html