custom-signatures - Create custom detection signatures for THOR
Create and deploy custom IOCs, YARA rules, Sigma rules, and STIX indicators for THOR scans
Tags
Updated: 2026-03-20Capabilities
Typical Inputs
Typical Outputs
What this skill does
- create IOC files
- create YARA rules
- create Sigma rules
- create STIX indicators
- encrypt IOCs
- encrypt YARA rules
- encrypt Sigma rules
- encrypt STIX indicators
- deploy signature files
- define YARA score
- specify YARA externals
Inputs
- IOC files
- YARA rules
- Sigma rules
- STIX indicators
- encrypted IOCs
- encrypted YARA rules
- encrypted Sigma rules
- encrypted STIX indicators
Outputs
- custom detection content
- THOR signature files
Requirements
- THOR scanner
- custom-signatures folder