Yara-Rules/rules resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

4879 stars · 1067 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A community-maintained repository of YARA rules for malware and threat detection, organized into categories like anti-debug/anti-VM, CVEs, crypto, exploit kits, and malicious documents. It provides a curated, up-to-date ruleset that can be used with YARA 3.0+ for scanning files and memory.

Use cases

• scan files for malware with yara rules
• detect malicious pdf and office documents
• identify exploit kits in web traffic samples
• find crypto algorithm signatures in binaries
• detect anti-debug and anti-vm techniques in samples
• match known CVE indicators in files

When to choose

• you need a broad, community-curated YARA ruleset to start malware hunting
• you want categorized signatures for documents, exploit kits, and CVEs
• you need an open-source (GPLv2) rules collection for security research

When to avoid

• you need real-time threat intel feeds with SLAs
• you require mobile malware rules relying on the deprecated Androguard module
• you need a commercial support-backed detection product

Facets

dataset · maturity maintenance

security vulnerability-scanning security developer-tools cross-platform cli yara malware-detection signatures threat-intelligence ruleset

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Yara-Rules/rules")