Josh aka Yoshi 🌻 on Twitter: "Personally, for most VT rules, I like to add in “https://t.co/UmWdHcnqoi_file” after doing a retrohunt. This means it’ll only apply to files @virustotal hasn’t seen before and not rescans. #100DaysofYARA #NotReally100FromMeButThereWasAnAttempt" / Twitter
https://twitter.com/chicagocyber/status/1513466113761366022