yara-rules
A repository of YARA rules for identifying and classifying malware through pattern-based detection.
A repository of YARA rules for identifying and classifying malware through pattern-based detection.
Checked October 2026.
The yara-rules repository contains a comprehensive collection of YARA rules designed for malware identification and classification.
These rules utilize textual and binary pattern matching to detect various types of malicious software and suspicious code patterns. The repository serves as a centralized resource for security professionals who need pre-written detection rules for their malware analysis workflows.
The collection includes rules targeting different malware families, attack techniques, and file formats commonly used by threat actors. Each rule is structured to identify specific indicators within files or memory, enabling automated detection and classification of potential threats.
Security analysts can integrate these rules into their existing YARA scanning infrastructure to enhance their threat detection capabilities. The rules are maintained and updated to address emerging malware variants and attack patterns observed in the wild.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about yara-rules: features, pricing and alternatives.
yara-rules is a product in the Detection Engineering category. It covers YARA, Signature Based Detection and Pattern Matching.
yara-rules is free. Download and setup instructions are at https://github.com/tenable/yara-rules/.
Alternatives to yara-rules listed on CybersecTools:
Compare all yara-rules alternatives at https://cybersectools.com/alternatives/yara-rules
yara-rules is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Embeddable Yara library for Java with support for loading rules and scanning data.
A Go library for manipulating YARA rulesets with the ability to programatically change metadata, rule names, and more.
Collects Yara rules from over 150 free resources, a free alternative to Valhalla.
Repository of YARA rules for Trellix ATR blogposts and investigations
Bindings for the Yara library from VirusTotal with support for Yara v4.2 and various features like rule compilation and scanning.
A Python-based Burp Suite extension that integrates Yara scanning capabilities for detecting patterns and signatures in web application traffic using custom Yara rules.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,032 products.
Connect your AI
