Awesome YARA

A curated list of awesome YARA rules, tools, and resources. Inspired by awesome-python and awesome-php.

YARA is an ancronym for: YARA: Another Recursive Ancronym, or Yet Another Ridiculous Acronym. Pick your choice.

-- Victor M. Alvarez (@plusvic)

YARA, the "pattern matching swiss knife for malware researchers (and everyone else)" is developed by @plusvic and @VirusTotal. View it on GitHub.

Contents

• 100 Days of YARA (#100DaysofYARA)
• Guides
• Rules
• Tools
• Services
• Syntax Highlighters
• People
• Videos and Talks
• Related Awesome Lists
• Contributing
  • Contributors

Legend

• 👀 - Actively maintained, a repository worth watching.
• 💎 - Novel, interesting, educational, or otherwise stand-out content.
• ✨ - Added more recently, shiny new toys.
• 🏆 - The biggest collection award, awarded to a single repo.

100 Days of YARA (#100DaysofYARA)

An annual YARA challenge started by Greg Lesnewich in 2022, inspired by #100DaysOfCode and taking place in the first 100 days of the year. The goal is to contribute daily to the YARA community through rule creation, source code contributions, or generally teaching/help your colleagues. Other key contributors include Wesley Shields and Steve Miller. For a list of all participants in the first two years of the challenge, see our Twitter List.

Rule collections from prior years of the challenge: 100 Days of YARA

Guides

• Yara Performance Guidelines
• YARA-Style-Guide

Rules