Skip to content
yararules.org
Menu

Glossary

Retrohunt

Retrohunt is the VirusTotal feature that runs YARA rules over previously submitted files to find older samples.

Retrohunt scans a historical window of files submitted to VirusTotal with your YARA rules. It answers "has this been seen before?" after you write a rule from a new sample, often revealing earlier builds or related tooling.

Precise rules give smaller, more useful result sets. See YARA on VirusTotal and Livehunt.