YARA
The pattern matching swiss knife for malware researchers (and everyone else)
winget install --id=VirusTotal.YARA -eDescription
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic.
YARA is available through winget as package ID VirusTotal.YARA, with version 4.5.5. Use the install command above to set it up on Windows without downloading a separate installer manually.
VirusTotal.YARA
Related Apps
It's a simple Microsoft Windows Desktop application that makes the interaction with VirusTotal as easy as a right-click.
Provides a language-agnostic way to express coding assumptions in .NET programs.
.NET Reactor is a powerful code protection and software licensing system for software written for the .NET Framework, and supports all languages that generate .NET assemblies.