---
title: "Edit an Auto YARA job"
method: POST
path: "/v1/auto-yara/jobs/edit"
tags: ["Auto Yara"]
---

# Edit an Auto YARA job

`POST /v1/auto-yara/jobs/edit`

## Request

- Base URL: `https://api.recordedfuture.com/malware-intelligence`
- URL: `https://api.recordedfuture.com/malware-intelligence/v1/auto-yara/jobs/edit`
- Auth: one of:
  - OAuth 2
    - Authorization code: `https://id.recordedfuture.com/authorize`
    - Token URL: `https://id.recordedfuture.com/token`
  - API key in header `X-RFToken`

Update the generated YARA rule on an existing job with revised detection logic.

## Request body

- EditYaraJobRequest: Request to edit the YARA rule string of an existing job. Requires valid YARA syntax.
  - `job_id` string, required: The unique identifier of the job to edit.
  - `yara_rule_str` string, required: The new YARA rule string to update the job with.

## Response `200`

Successful Response

- EditJobResponse: Result of editing a YARA rule job.
  - `job_id` string, required: The unique identifier of the edited job.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Page not found

---

[API](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence.md) - [All operations](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/recorded-future-malware-intelligence/revisions/190a3d1d0680?raw)