YARA: Pattern-Matching for Malware

• "The pattern-matching swiss knife for malware researchers."
• Write rules that match files (or processes) by content.
• Used for hunting, classification, and detection at scale.
• A rule has three parts: meta, strings, condition.