OCaml-yara is a Ctypes wrapper that provides OCaml bindings for the YARA matching engine, enabling developers to integrate malware identification capabilities into OCaml applications. The tool serves as a bridge between OCaml programming language and YARA's pattern matching functionality, allowing for file and memory scanning operations within OCaml-based security tools and applications. It offers a programmatic interface for implementing YARA rule-based detection in OCaml environments, supporting the development of custom malware analysis and detection systems. The wrapper maintains compatibility with YARA's core features while providing OCaml-native function calls and data structures for seamless integration into existing OCaml codebases.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A static analysis tool for PE files that identifies potential malicious indicators through compiler detection, packing analysis, signature matching, and suspicious string identification.
A binary analysis and management framework for organizing and analyzing malware and exploit samples, and creating plugins.
CAPA is a static analysis tool that detects and reports capabilities in executable files across multiple formats, mapping findings to MITRE ATT&CK tactics and techniques.
A collaborative malware analysis framework with various features for automated analysis tasks.
Valkyrie is a sophisticated file verdict system that enhances malware detection through behavioral analysis and extensive file feature examination.
A .NET assembly debugger and editor that enables reverse engineering and dynamic analysis of compiled .NET applications without source code access.
An open source .NET deobfuscator and unpacker that restores packed and obfuscated assemblies by reversing various obfuscation techniques.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.