Alternatives to YARA-X
Match files against rules describing suspicious binary patterns. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
YARA-X
Match files against rules describing suspicious binary patterns.
Replacements
Listings that take over the same core job as YARA-X.
YARA
Pattern-matching engine for identifying and classifying malware samples.
YARA is the original engine whose rule format is the common language for malware signatures, but it is now in maintenance mode with development moved to YARA-X.
Also worth comparing
These listings name YARA-X as their own alternative, so the relationship runs both ways.
THOR Lite
A free multi-platform IOC and YARA scanner for checking systems for signs of compromise.
YARA-X is the open-source modern rewrite of YARA, matching files against rules but without THOR Lite's IOC, process and autorun scanning.
Similar software
Related functionality, not a direct replacement.
capa
Identify likely capabilities inside executable files.
ClamAV
An open source antivirus engine, used mostly for scanning mail servers and file shares rather than desktops.
VirusTotal
Online service that checks a URL or file against many antivirus engines and URL scanners.
REMnux
Linux toolkit for reverse engineering and analysing malicious software.
Chainsaw
Search Windows forensic records for suspicious activity.
Detect It Easy
A program that identifies file types, packers, compilers and protectors used in executables.
