Audience
Pattern matching solution for malware researchers
About YARA
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic. YARA-CI may be a useful addition to your toolbelt. This is GitHub application that provides continuous testing for your rules, helping you to identify common mistakes and false positives. The above rule is telling YARA that any file containing one of the three strings must be reported as silent_banker.
Other Popular Alternatives & Related Software
Unkown Cyber
Get the information advantage needed to beat the next threat. 24/ 7 investigation of alerts that remain unknown to other solutions. Immediately know that an unknown suspect’s code is a variant of malware quantifiably with 70-100% similarity. Immediately know all the suspect’s matched malware families, the type of malware, and IOCs. Act automatically and block perfect malware matches. Escalate suspects after obtaining an information advantage that arrives with the code of interest already identified. Automatically employ newly extracted IOCs and all matched IOCs to harden. Hunt and monitor with automatically created highly accurate bytecode-based YARA created from the suspect just convicted, our collection of matched code, or from specifically selected malware samples. Customizable API lets you automate action to save expert time by automatically deobfuscating and reversing exploit code to individual functions.
Learn more
Cofense Triage
Cofense Triage™ accelerates phishing email identification and mitigation. Improve your response time with integration and automation. We use Cofense Intelligence™ rules and an industry-leading spam engine to automatically identify and analyze threats. And our robust read/write API lets you integrate intelligent phishing defense into your workflow, so your team can focus their efforts and protect your organization. We know stopping phish isn’t always straightforward. That’s why Cofense Triage™ makes it easy to get on-demand help from the experts. They’re just one click away, anytime. Our Threat Intelligence and Research Teams continually update our library of YARA rules, making it easier for you to identify emerging campaigns and improve response time. And the Cofense Triage Community Exchange allows you to crowd-source phishing email analysis and threat intelligence, so you’re never on your own.
Learn more
Siterack
All of your websites are pinged every 60 seconds to make sure they are alive and well. If an error is reported back, Siterack assesses the problem and will send a note to let you know. Siterack automatically runs a daily backup of all your sites and securely stores them in our cloud. All backups are displayed in your site's Control Center so you can easily search for the one you need. Before each update, Siterack grabs a backup - just in case. Afterward, Siterack incrementally updates each package and scans the site for any issues or failures using our AI. Error Detection system. If anything goes wrong, Siterack will automatically restore the most recent backup and let you know. Using dual-method, malware detection technology, the Siterack Malware Engine runs daily scans looking for and removing any malicious packages. The system uses a combination of Yara rule and signature violations to detect the malware and automatically remove it upon discovery.
Learn more
Veeam Recovery Orchestrator
Veeam Recovery Orchestration & Compliance is a recovery automation and compliance solution within Veeam Data Platform. The software helps organizations build tested, auditable recovery plans that prove readiness before a real outage, cyberattack, or disaster occurs. It automates recovery workflows, approvals, documentation, clean room validation, malware scanning, and disaster recovery drills. Teams can use YARA rules, malware checks, and clean restore point validation to reduce reinfection risk before returning workloads to production. Veeam Recovery Orchestration & Compliance also generates runbooks, captures recovery evidence, validates RPO and RTO targets, and supports audit-ready reporting. Built for IT, security, compliance, and disaster recovery teams, it helps organizations recover fast, recover clean, and demonstrate resilience with confidence.
Learn more
Integrations
Company Information
YARA
virustotal.github.io/yara/
Videos and Screen Captures
Other Useful Business Software
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Product Details
Platforms Supported
Windows
Mac
Linux
Training
Documentation
Support
Online
