airbnb/binaryalert

Health v2 · maintenance only

Adoption not part of the score

1455 stars · 180 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

BinaryAlert is an open-source serverless AWS pipeline that scans every file uploaded to an S3 bucket against a configurable set of YARA rules and fires alerts on matches. It is deployed entirely via Terraform, uses Lambda for all computation, and supports retroactive rescanning of the file corpus when rules change.

Use cases

• detect malware in files uploaded to S3 in real time
• scan an existing file corpus with new YARA rules retroactively
• set up serverless malware detection in my AWS account
• alert my incident response team when a malicious binary is found
• manage YARA rules across a team and deploy them to a scanning pipeline
• analyze millions of files per day without managing servers

When to choose

• you are AWS-centric and want a serverless, Terraform-deployed malware scanner
• you need real-time YARA-based file scanning with SNS alerting
• you want retroactive analysis when your ruleset changes
• you prefer no servers to maintain and pay-per-use costs

When to avoid

• you need on-premises or non-AWS deployment
• you need deep static/dynamic analysis beyond YARA matching (e.g., sandboxing, reverse engineering)
• you require real-time sub-second detection outside an S3-upload workflow
• you need actively developed features - the project is in maintenance mode

Facets

service · maturity maintenance

security monitoring alerting infrastructure-as-code serverless security cloud-computing cloud python serverless yara malware-detection aws-lambda s3 incident-response retroactive-scanning devops terraform

Member repositories

For agents

markdown · JSON · MCP: product_card(name="airbnb/binaryalert")