slackbuilds_ponce/misc/yara
Robby Workman 143991a46e Entire Repo: Remove APPROVED field from .info files
This field used to make sense in our pre-git days, but
the Signed-Off-By: line serves the same purpose (and
even more) now, so APPROVED has been rejected.  ;-)

Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
2012-08-14 23:22:50 -05:00
..
doinst.sh misc/yara: Added (A malware identification and classification tool) 2011-10-11 21:20:25 -05:00
README misc/yara: Added (A malware identification and classification tool) 2011-10-11 21:20:25 -05:00
slack-desc misc/yara: Added (A malware identification and classification tool) 2011-10-11 21:20:25 -05:00
yara.info Entire Repo: Remove APPROVED field from .info files 2012-08-14 23:22:50 -05:00
yara.SlackBuild misc/yara: Added (A malware identification and classification tool) 2011-10-11 21:20:25 -05:00

YARA - a malware identification and classification tool

YARA is a tool aimed at helping malware researchers to identify and classify
malware samples. With YARA you can create descriptions of malware families
based on textual or binary patterns contained on samples of those families.
Each description consists of a set of strings and a Boolean expression which
determines its logic.

YARA is multi-platform, running on Windows, Linux and Mac OS X, and can be used
through its command-line interface or from your own Python scripts with the
yara-python extension.