get_submission_yara_rules
Retrieve YARA rules that matched during malware analysis for a specific submission UUID to identify detection patterns and threat signatures.
Instructions
Get all matched YARA rules for a specific submission.
Args: uuid: Submission UUID
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| uuid | Yes |
Implementation Reference
- src/threatzone_mcp/server.py:469-477 (handler)The handler function for the get_submission_yara_rules tool. It is registered via the @app.tool decorator in FastMCP and fetches matched YARA rules for a given submission UUID from the ThreatZone API.@app.tool async def get_submission_yara_rules(uuid: str) -> Dict[str, Any]: """ Get all matched YARA rules for a specific submission. Args: uuid: Submission UUID """ return await get_client().get(f"/public-api/get/submission/{uuid}/matched-yara-rules")