Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|
Automatically curate open source yara rules and run scans
go get github.com/EFForg/yaya cd $GOPATH/src/github.com/EFForg/yaya go build go install
Yaya depends on the following packages outside the standard library:
You must also install the yara4 C libraries. We recommend you install these from source with the following command:
wget https://github.com/VirusTotal/yara/archive/refs/tags/v4.1.0.tar.gz && mkdir yara && cd yara && tar xf ../v4.1.0.tar.gz \
&& cd yara-4.1.0/ && ./bootstrap.sh && ./configure --enable-cuckoo --enable-magic --enable-dotnet && make && sudo make install && sudo ldconfig
More info and docs can be found here
yaya [-h] <command> <path> -h print this help screen Commands: update - update rulesets edit - ban or remove rulesets add - add a custom ruleset, located at <path> scan - perform a yara scan on the directory at <path> export - export all yara rules in single yar file in <path>
YAYA includes a docker file and can be run inside a container as well by linking the path to be scanned to a path in the container.