TLDR InfoSec · MISCELLANEOUS

YARA IS DEAD, LONG LIVE YARA-X

virustotal.github.io3 min read

Summary from the TLDR InfoSec newsletter

YARA has been rewritten as YARA-X in Rust for better user experience, rule-level compatibility, performance, reliability, and developer-friendliness. The rewrite was necessary due to significant design changes and the limitations of the existing C codebase. YARA-X is currently stable but in beta. The project aims to surpass YARA in all aspects through ongoing enhancements.