Lightweight Binary Similarity - YARA Using PE Features for Quick Wins

Slides from Cyber Defense Summit 2021 by Connor McLaughlin and Greg Lesnewich of Recorded Future

Using YARA as an analysis tool to quickly cluster executable files based on shared features