YARA

Definition

1. 1.YARA is a tool used to identify and classify malware samples by creating descriptions of malware families based on textual or binary patterns.

Example

YARA rules are used by security researchers to detect and categorize new malware variants.

Related Exams