The connector reads YARA rules from a configured directory to efficiently scan binaries as they are seen by the EDR server. The generated threat information is used to produce an intelligence feed for ...