yara-scan

Scan a file or directory with YARA rules (classic yara or the newer yara-x). Ships a small high-signal starter rule pack; point --rules at a real corpus (YARA-Rules, signature-base, your own) for serious coverage. Read-only — matches patterns, never runs the target. Prereq-gated on the yara CLI with honest degradation.

Independent GitHub snapshot · Automated classification · Original documentation governs