Crate yara_forge

YARA Rule Generator

A comprehensive Rust library for generating YARA rules. This library provides a simple and intuitive API to create, validate, and manage YARA rules programmatically.

Re-exports

pub use patterns::C2_PATTERNS;

pub use patterns::ENCRYPTION_APIS;

pub use patterns::FILE_HEADERS;

pub use patterns::OBFUSCATION_PATTERNS;

pub use patterns::RANSOMWARE_EXTENSIONS;

pub use templates::backdoor_template;

pub use templates::cryptominer_template;

pub use templates::filetype_template;

pub use templates::malware_template;

pub use templates::ransomware_template;

pub use utils::export_rule_to_json;

pub use utils::import_rule_from_json;

pub use utils::load_rule_from_file;

pub use utils::save_rule_to_file;

pub use validation::scan_with_rule;

pub use validation::validate_against_samples;

pub use validation::validate_rule;

pub use validation::ValidationOptions;

Modules

patterns

Common YARA pattern libraries Provides pre-defined patterns for various detection scenarios

templates

Pre-defined templates for common YARA rule patterns This module provides ready-to-use templates for various types of malware detection

utils

Utility functions for YARA rule generation Provides helper functions for common tasks

validation

Validation module for YARA rules Provides functionality to validate and test YARA rules

Structs

Rule

A complete YARA rule

RuleBuilder

Builder for creating YARA rules

StringDefinition

A YARA rule string definition

Enums

YaraError