Skip to content

Yara

1 operations. Call any of them with cyberchef_bake, or pre-load them with CYBERCHEF_TOOL_SURFACE=all.

YARA is a tool developed at VirusTotal, primarily aimed at helping malware researchers to identify and classify malware samples. It matches based on rules specified by the user containing textual or binary patterns and a boolean expression. For help on writing rules, see the YARA documentation.

  • Tool name: cyberchef_yara_rules
  • Input / output: ArrayBufferstring
Argument Type Default
rules text
show_strings boolean false
show_string_lengths boolean false
show_metadata boolean false
show_counts boolean true
show_rule_warnings boolean true
show_console_module_messages boolean true