Pattern matching Swiss Army knife for malware researchers
YARA is a tool for identifying and classifying malware samples by creating rules based on textual or binary patterns. Used by malware researchers, incident responders, and threat intelligence analysts, it allows writing descriptions of malware families using boolean expressions and wildcard patterns.