What this endpoint does

This operation updates the YARA rule string associated with an existing Auto YARA job. After reviewing a rule generated by the Create Auto YARA Job endpoint (retrieved via the Get YARA Job endpoint), use this endpoint to refine or replace the YARA rule logic. The yara_rule_str must be valid YARA syntax; invalid rules will return an error. Note that unlike most other endpoints in this API, the job ID is passed in the request body rather than as a path parameter. Use the Get YARA Jobs endpoint to find job IDs, or save the ID returned when creating a job.

Response data

The response contains the job_id of the updated job, confirming the edit was applied. To verify the updated rule, retrieve the job via the Get YARA Job endpoint and inspect the yara_rule_str field.