
Official repository of YARA rules for threat detection and hunting
Checked October 2026.
Welcome to the official ReversingLabs YARA rules repository! The repository will be updated continuously, as we develop rules for new threats, and after their quality has been proven through testing in our cloud and other environments.
These rules have been written by our threat analysts, for threat hunters, incident responders, security analysts, and other defenders that could benefit from deploying high-quality threat detection YARA rules in their environment.
Our detection rules, as opposed to hunting rules, need to satisfy certain criteria to be eligible for deployment, namely:
In order for the rules to be easy to understand and maintain, we adopted the following set of goals:
To ensure the quality of our rules, we continuously and extensively test them in our cloud, on over 10B (and rising) unique binaries.
Rules are evaluated on every layer to detect threats within layered objects, such as packed PE files, documents, and other types of files.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about ReversingLabs YARA Rules: features, pricing and alternatives.
ReversingLabs YARA Rules is a product in the Detection Engineering category. It covers Rule Engine and YARA.
ReversingLabs YARA Rules is free. Download and setup instructions are at https://github.com/reversinglabs/reversinglabs-yara-rules/.
Alternatives to ReversingLabs YARA Rules listed on CybersecTools:
Compare all ReversingLabs YARA Rules alternatives at https://cybersectools.com/alternatives/reversinglabs-yara-rules
ReversingLabs YARA Rules is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Runs security detections across distributed data sources without SIEM ingestion.
A curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) for threat detection and malware identification.
Threat intelligence service providing threat profiles and analytics for MDR
AI platform for continuous detection rule validation, optimization & governance.
Automated QA tool for Elastic Security detection rules and queries.
Curated attack use case platform that feeds threat scenarios into Jizô AI.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,023 products.
Connect your AI