Open-source alternatives to Yari

Yara rule generator using VirusTotal code similarity feature code-similar-to:

Parsing of YARA rules into AST and building new rulesets in C++.

YARA Language Server

Clojure YARA-style pattern matching - malware signatures, hex/ascii/regex patterns

Performs OCR on image files and scans them for matches to YARA rules

Repository that contains a set of purposefully erroneous Yara rules.

Yara integrated software to handle archive file data.

Python 3 tool to parse Yara rules (extension of yarabuilder)

IDA Processor for Compiled YARA Rules

YARA malware query accelerator (web frontend)

#supply #chain #attack #detection

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

Validates yara rules and tries to repair the broken ones.

Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.

Incident Response - Fast suspicious file finder

Incident Response & Digital Forensics Debugging Extension

CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the Private API system. This framework automatically downloads recent samples, which triggered an alert on the users YARA notification feed.

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA

Create base64 or XOR encoded variations of a string (or list of strings for base64)

Scan files with Yara and send rule matches to VirusTotal reports as comments

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

⚡️ Fast and lightweight malware scanner written in go.

YaraDbg is a free web-based Yara debugger to help security analysts to write hunting or detection rules with less effort and more confidence. By using YaraDbg, you can perform a thorough root-cause-analysis (RCA) on why some of your Yara rules did or did not match with a specific file. It can…

Simple yara rule manager