Super Sheep (@[email protected]) so where did we land? well - strings, which were low effort, yielded the same results as ~20 minutes or so of analysis in disassembly. This was not an 'expected' outcome - this was just a live tweeting of my process of how and why decisions get made in my YARA journey