Create and test your own Yara signatures



  • Our rating
Sending
User Rating 5 (2 votes)
YaraEditor is a tool that will help you to write and test signatures for the Yara engine.

To learn how to write signatures with the Yara syntax, please refer to the proper documentation.
Choose your plan
  •    Registration
    If machine registration is available
  •    Machines
    Number of machines allowed to register
  •    Custom plans
    If custom plans are available (Ex: company)
  •    Database model
    Edit/Save your rules from a database model (SQlite only)
  •    Editor
    Editor your rules, with syntax highlight
  •    Aliases
    Define aliases to replace long strings
  •    Limitation
    Software limitation
  •    Support
    Get support for your questions or feedback
  •    Automatic Updates
    Update the software with one click
  •    Themes
    Customize the software appearance using built-in themes

Personal

$49/year
  • 5
    You can register up to 5 machines with your license.
  • Special plans available for companies.
  • No limitation

Free

$0
  • 5 files
    5 files open at the same time

IconYaraEditor Download
AuthorAdlice Software
Version2.3.0
Download606
Category,
File Size19.6 MB
LicenseFreemium
Operating SystemWindows XP, Vista, 7, 8, 8.1, 10. 32/64 bits
Tags   analysis     editor     malware     pe     reverse engineering     signatures     test     yara  
 

Screenshots

 

Description and Review

 
YaraEditor is a FREE (with Premium version) software that helps building and testing Yara signatures. The features are listed below:

 

Features:

  • Syntax highlighting.
  • Drag N drop support.
  • Write yara signatures in a complete IDE.
  • Edit either from raw files, or in a database model (SQLite)
  • Compile rules and fix your errors.
  • Test your rules against strings (ANSI/Unicode).
  • Test your rules by scanning processes memory.
  • Test your rules by scanning files.
  • Test your rules by scanning folders.
  • Powerful rules search.
  • Write aliases to replace long (and repetitive) patterns at compilation.

 

User guide

Please refer to the dedicated documentation.
 

 
Download
FileAction
YaraEditor.exe (32 bits)Download 
YaraEditor.exe (64 bits)Download