Kaspersky Anti Targeted Attack (KATA) Platform

Deleting YARA rules

8 November 2023

ID 247722

To delete a YARA rule:

  1. In the window of the application web interface, select the Custom rules section, YARA subsection.

    This opens the YARA rule table.

  2. Select the rule that you want to delete.

    This opens a window containing information about the rule.

  3. Click Delete.
  4. This opens the action confirmation window; in that window, click Yes.

The rule is deleted.

To delete all or multiple YARA rules:

  1. In the window of the application web interface, select the Custom rules section, YARA subsection.

    This opens the YARA rule table.

  2. Select the check boxes on the left of the rules that you want to delete.

    You can select all rules by selecting the check box in the row containing the headers of columns.

    A control panel appears in the lower part of the window.

  3. Click Delete.
  4. This opens the action confirmation window; in that window, click Yes.

The selected rules will be deleted.

Users with the Security auditor and Security officer roles cannot delete YARA rules.

See also

Managing user-defined YARA rules

Viewing the YARA rule table

Configuring YARA rule table display

Importing YARA rules

Viewing YARA rule details

Filtering and searching YARA rules

Clearing a YARA rule filter

Enabling and disabling YARA rules

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.