This extension provides many features common to code editors, such as Rule and Identifier Definitions, Rule and Identifier References, Module Code Completion, Hovers for Hex Strings, and Snippets. This extension provides some text snippets, which allows users to auto-complete certain common YARA rule patterns. More information can be found on the Snippets wiki page. Problems? If you encounter an issue with the syntax, feel free to create an issue or pull request! Alternatively, check out some of the YARA syntaxes for Sublime and Atom, such as blacktop's excellent language-yara syntax. YARA Documentation https://yara.readthedocs.io/
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A program to manage yara ruleset in a database with support for different databases and configuration options.
A tool that extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.
yextend extends Yara's functionality by automatically handling archived and compressed content inflation, enabling pattern matching on files buried within multiple layers of archives.
A .NET assembly debugger and editor that enables reverse engineering and dynamic analysis of compiled .NET applications without source code access.
Code to prevent a managed .NET debugger/profiler from working.
An open-source dynamic analysis framework that intercepts and monitors API calls in Android applications using the Android Substrate framework.
An open source machine code decompiler that converts binary executables into readable C source code across multiple architectures and file formats.
A collaborative malware analysis framework with various features for automated analysis tasks.