{"slug":"performing-threat-hunting-with-yara-rules","source_name":"performing-threat-hunting-with-yara-rules","name":"Performing Threat Hunting With Yara Rules","description":"Use YARA pattern-matching rules to hunt for malware, suspicious files, and indicators of compromise across filesystems and memory dumps. Covers rule authoring, yara-python scanning, and integration with threat intel feeds.","version":1,"lift":{"pass_rate_delta_pts":36.36,"pass_rate_pct":45.5,"total_cases":22,"passed_cases":10,"tokens_delta_pct":137,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T11:34:53.981902+00:00"},"skill_score":0.4545,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":36.36,"with_pass_pct":45.5,"without_pass_pct":9.1,"tokens_delta_pct":137,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-28T11:34:53.981902+00:00","run_id":"1d073f7b-dab7-4a04-929d-94cb23b94e2b","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"a5418b5a4fbedc70cae06f5c405a66893376cca599430979c01bf017c1b95d03","raw_url":"https://app.decimal.ai/s/performing-threat-hunting-with-yara-rules/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/performing-threat-hunting-with-yara-rules"}