100daysofyara/2023

Rules Shared by the Community from 100 Days of YARA 2023

2023's Issues

idea: add a default license and encourage contributors to add a license in the meta section

to actually make some use of all the nice rules here, it would be useful if some license would be attached. you could add a default license to the repo and encourage contributors to add a license in the meta section, if they don't like the default e.g.:

private rule webshell_encoded_stats : WEBSHELL PROD {
	meta:
		description = "Webshell having statistical signs of encoded code which gets dynamically executed"
		license = "Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE"
		license = "https://creativecommons.org/licenses/by-nc/4.0/"
		author = "Arnim Rupp"
		date = "2021/02/07"
	condition:
...

idea: integrate yara-ci

YARA-CI helps you to keep your YARA rules in good shape. It can be integrated into any GitHub repository containing YARA rules, and it will run automated tests every time you make some change. The automated tests include:

Rules validation
Detection of false positives
Detection of false negatives

https://yara-ci.cloud.virustotal.com/