Can any one explain the difference between YARA and ClamAV ? Are they just two different ways of writing AV or Malware signatures ?
1 Answer
Yara is a tool which is used to write a rule for detection of malwares whereas CLAMAV is antivirus that has predefined rulesets that is used to detect the malicious software or malware. Today there are various antivirus engines use yara rules to detect malwares. YARA provides simple and efficient way of writing rules. It is more popular because of it can be used through yara-python library. So if you want build your own malware detection framework so you can use it efficiently.
-
-
Yes you can. Use this python script code.google.com/p/malwarecookbook/source/browse/trunk/3/3/… Nov 26, 2014 at 11:28
-
-
1You can now use Yara rules in ClamAV (and not just the other way around): blog.clamav.net/2015/06/clamav-099b-meets-yara.html Oct 14, 2015 at 5:10