Can any one explain the difference between YARA and ClamAV ? Are they just two different ways of writing AV or Malware signatures ?
Yara is a tool which is used to write a rule for detection of malwares whereas CLAMAV is antivirus that has predefined rulesets that is used to detect the malicious software or malware. Today there are various antivirus engines use yara rules to detect malwares. YARA provides simple and efficient way of writing rules. It is more popular because of it can be used through yara-python library. So if you want build your own malware detection framework so you can use it efficiently.
answered Nov 26 '14 at 9:08
-
-
Yes you can. Use this python script code.google.com/p/malwarecookbook/source/browse/trunk/3/3/… – P4cK3tHuNt3R Nov 26 '14 at 11:28
-
-
1You can now use Yara rules in ClamAV (and not just the other way around): blog.clamav.net/2015/06/clamav-099b-meets-yara.html – Nakedible Oct 14 '15 at 5:10
