SBT CJDE

Security Blue Team Certified Junior Detection Engineer (CJDE)

Yara RulesEnglish
Exam overview

Practice session

A YARA rule must match a file that contains the string 'MZ' at offset 0 AND has a PE section named '.text'. Which YARA condition correctly expresses this?

Loading your practice session…