yara-writing

Official

Craft robust YARA rules to spot malware fast.

AuthorLiberty91LTD
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This guide helps security professionals and developers write YARA rules to detect malware by matching byte patterns, strings, and file properties, enabling fast threat detection and classification.

Core Features & Use Cases

  • Rule structure and metadata organization for readable, maintainable rules.
  • String matching techniques: text, hex, and regular expressions with safe patterns and performance considerations.
  • Use cases include incident response, threat hunting, and proactive malware detection in security tooling and repositories.

Quick Start

Create a basic YARA rule that detects malware by matching specific strings and a PE header.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: yara-writing
Download link: https://github.com/Liberty91LTD/cti-skills/archive/main.zip#yara-writing

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.