yara as a tool for attribution

yara can be used as a tool to attribute malware or threat actors.

When analyzing malware, be on the lookout for certain types of strings that may be identifying to the individuals who wrote the malware. Pay close attention to strings and metadata such as names, paths, language settings, and so forth.

---