nordisk/holger
distribution/e2e-clients/yara/holger-e2e.yar
// The gate's pinned YARA rule (A29-11): the marker only the gate's dropper-crate fixture
// carries. holger's built-in YARA engine runs it (no yara binary needed).
rule Holger_E2E_Fixture_Marker {
strings:
$a = "HOLGER-E2E-YARA-FIXTURE"
condition:
$a
}