12 lines
564 B
Plaintext
12 lines
564 B
Plaintext
YARA - a malware identification and classification tool
|
|
|
|
YARA is a tool aimed at helping malware researchers to identify and
|
|
classify malware samples. With YARA you can create descriptions of
|
|
malware families based on textual or binary patterns contained on
|
|
samples of those families. Each description consists of a set of
|
|
strings and a Boolean expression which determines its logic.
|
|
|
|
YARA is multi-platform, running on Windows, Linux and Mac OS X, and
|
|
can be used through its command-line interface or from your own Python
|
|
scripts with the yara-python extension.
|