Yara Manager Logo

Yara Manager

0
Free
Visit Website

A simple program to manage your yara ruleset in a database. By default sqlite will be used, but using MySQL/MariaDB or Postgres is also possible. Todos Implement backup and sharing possibilities. Yara Manager creates a fresh config if none exists. If you update from an older version, please pay attention to freshly added config options. You can reset your configuration using ym config reset, however, this will also overwrite any custom changes you made. The most important configuration to change is probably your editor. The default configuration uses codium -w for opening rules. You can use e.g. EDITOR=vim DISABLE_STATUS=1 ym config edit to open your config in Vim (and you can type :w to save and :q to quit).

FEATURES

ALTERNATIVES

Automatic analysis of malware behavior using machine learning.

A library and command line interface for extracting URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules from text corpora.

A Go library for manipulating YARA rulesets with the ability to programatically change metadata, rule names, and more.

Andromeda makes reverse engineering of Android applications faster and easier.

A yara module for searching strings inside zip files

Hyara is a plugin that simplifies writing YARA rules with various convenient features.

A simple Python script to test for a hypothetical JWT vulnerability

Krakatau provides an assembler and disassembler for Java bytecode, supporting conversion, creation, examination, comparison, and decompilation of Java binaries.