We’ve already looked at using the math module to measure the entropy of PE sections and resources, but there are a huge list of functions available with the math module such as mean, mode, percentage, monti_carlo_pi and more.


Check out the full list of functions here: https://yara.readthedocs.io/en/stable/modules/math.html


Can you think of interesting experiments or ideas for how to use some of these in detection? Join the discussion below to share ideas or thoughts for potential use cases.
