CB Response: Yara 2.0 worker yara_rules directory out-of-sync

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

The yara_rules directory on worker contains older rules that are no longer used and not reflected in the yara_rules directory on the agent side.

Environment

• CB Response Server: 6.x and Higher
• Yara Connector 2.0

Cause

Yara connector needs better handling for rules. (CB-28003)

Resolution

No available workaround.

Additional Information

Worker will only use current rules.  This behavior does not impact functionality and will be addressed in a future release.