User Guide

Who is this for?

Those who want to get up and running with the built-in functionality provided with the toolkit. This includes how to use the example YARA Analysis Engine, as well as details of the built-in SQLite State Management database, and other components.

Where do I go if I have questions?

Review the troubleshooting section if something isn't working as expected. If you want to modify the toolkit, see the Developer Guide.

In what order should I follow the guide?

Generally,

1. Set up API Access
2. Edit your configuration file
3. Modify YARA rules (optional)
4. Run the analysis utility

Index

• Configuring API Access
• Getting Started Out of the Box
• Configuring YARA rules
• How to Create a Feed
• Troubleshooting