YARAC(1)

🎀 YARAC 🎀

okay bestie, welcome to the manual for yarac — yes that's the section 1 page, she's iconic, she compiles rules to yara, and we're gonna walk through her together 💅

✨ NAME ✨

yarac — compile rules to yara 🦋

🌸 SYNOPSIS 🌸

yarac [OPTION]... [RULE_FILE]... OUTPUT_FILE

💖 DESCRIPTION 💖

so to invoke YARA you're gonna need two things, no cap: a file with the rules you wanna use (either in source code or compiled form), and the target to be scanned. and the target can literally be a file, a folder, or a process. slay, versatile queen 👑

rule files can be passed directly in source code form, OR they can be previously compiled with the yarac tool. and here's the tea, bestie: you may prefer to use your rules in compiled form if you're gonna invoke YARA multiple times with the same rules. the way that saves you so much time — because for YARA it's faster to load compiled rules than compiling the same rules over and over again. periodt ⏱️✨

the rules will be applied to the target specified as the last argument to YARA, and if it's a path to a directory, all the files contained in it will be scanned. every single one. she's thorough like that 🧚

👑 OPTIONS 👑

• -d <identifier>=<value> — define external variable. yes bestie, you get to define stuff 🌈
• -w, --no-warnings — Disable warnings. hush hush 🙈
• --fail-on-warnings — Treat warnings as errors. ⚠️ but heads up: this has no effect if used with --no-warnings.
• -v, --version — Show version information. the classic "who am i" moment 💫

🍓 EXAMPLE 🍓

the -d is used to define external variables. for example:

-d flag=true
-d beast=666
-d name="James Bond"

look at her go, defining variables like it's nothing 💜

🔥 SEE ALSO 🔥

• yara(1)

go read that one too, they're a duo, iykyk 🫶

🌟 AUTHOR 🌟

yarac was written by Victor M. Alvarez <vmalvarez@virustotal.com>. and this manual page was written by Joao Eriberto Mota Filho <eriberto@eriberto.pro.br> for the Debian project (but may be used by others). give them their flowers, they ate 💐👑

and that's the whole page bestie, you're basically a yarac expert now 💅

YARAC 2.0 — Jan 2014 💖 mwah, go compile something iconic ✨