Posts

Showing posts with the label yarAnalyzer – Yara Rule Analyzer and Statistics Generator

yarAnalyzer – Yara Rule Analyzer and Statistics Generator

Image
yarAnalyzer is a Python-based YARA rule analyzer that can also generate statistics from yara rulesets. It also has an inventory creation feature that can output a CSV file detailing the rules. yarAnalyzer - Yara Rule Analyzer and Statistics Generator It creates statistics on a YARA rule set and files in a sample directory. Place some signatures with .yar extension in the “signatures” folder and then run yarAnalyzer on a certain sample directory. Usage usage: yarAnalyzer.py [-h] -p path [-s sigpath] [-e ext] [-i identifier]                       [-m max-size] [-l max-string] [-f first-bytes] [--excel]                       [--noempty] [--printAll] [--debug] yarAnalyzer - Yara Rules Statistics and Analysis optional arguments:   -h, --help      show this help message and exit   -p path         Path to scan   -s sigpath    ...