Command-line tool
yara
brew/yara
Checked 25 Oct 2026, 21:09 UTC · Listing refreshed from Homebrew, winget, npm, Scoop and cargo; npm packages checked against OSV.dev
Malware identification and classification tool
At a glance
- Type
- Command-line tool
- Install on
- Windows, macOS, Linux
- Last checked
- 25 Oct 2026, 21:09 UTC
Install it
Windows
winget install --id VirusTotal.YARA -e
macOS
brew install yara
Linux
brew install yara
Scan a specific file with a rule file
yara path/to/rule.yar path/to/file
Recursively scan a directory and subdirectories containing possible threats
yara path/to/rule.yar -r path/to/directory
Scan a running process by its PID using multiple rules
yara path/to/rule1.yar path/to/rule2.yar ... process_id
Browse
Related command-line tools
- yara-x
Tool to do pattern matching for malware research - malcontent
Supply Chain Attack Detection, via context differential analysis and YARA - adapterremoval
Rapid adapter trimming, identification, and read merging - observerward
Web application and service fingerprint identification tool - ClamXAV
Anti-virus and malware scanner - rkhunter
Rootkit hunter - libprotoident
Performs application layer protocol identification for flows - file-identify
File identification library for Rust - detects file types based on extensions, shebangs, and content
Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents