get_submission_yara_rules
Retrieve YARA rules matched during malware analysis to identify threats and understand detection patterns for a specific submission.
Instructions
Get all matched YARA rules for a specific submission.
Args: uuid: Submission UUID
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| uuid | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/threatzone_mcp/server.py:469-477 (handler)The handler function decorated with @app.tool, implementing the tool logic by fetching matched YARA rules from the ThreatZone API endpoint for the given submission UUID.
@app.tool async def get_submission_yara_rules(uuid: str) -> Dict[str, Any]: """ Get all matched YARA rules for a specific submission. Args: uuid: Submission UUID """ return await get_client().get(f"/public-api/get/submission/{uuid}/matched-yara-rules")