From Dev.to
Building and Testing Detections for UNK_DeadDrop
The published companion snapshot contains 33 named YARA rules in 28 files, and every rule matched at least one object in the saved investigation material, while none matched the small local software b...