Skip to main content

Hi all ,

Splunk logic  

| search fromPort=20 to Port= 3000

How to achieves this in yara L ?

Hi,
We can accomplish this by utilizing the UDM fields listed below in the Yara-L rule.

$network.target.port >= 20 and $network.target.port <= 3000

Reply