---
title: "Create YARA rule"
method: POST
path: "/yara"
---

# Create YARA rule

`POST /yara`

Add a custom YARA rule compiled and validated server-side for automatic matching in future analyses.

## Request body

- object
  - `name` string, required — Rule filename (e.g., my_rule.yar)
  - `rule` string, required — YARA rule content

## Response `200`

Rule created successfully.

- object — Empty response confirming rule creation.

## Other responses

- `400` — Compilation error or duplicate name.

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/versions/c8c2f68d8b60/schema)