[Valhalla] To review

[Lhorus6]

Description

The data imported by the Valhalla connector is good, well formatted, with author and markings. There are just two points that need to be checked.

Imported data

Every day, the connector retrieves the same amount of data. We need to check if it doesn't always retrieve the same things, and if so, how we can improve it.

Error

When importing, there are a lot of "Indicator of type yara is not correctly formatted."

We need to check whether YARAs are badly formatted or whether the platform has a bug and considers them to be badly formatted when they are not.

Environment

OCTI 6.5.5

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Enable the Valhalla connector