参考文档 Getting startedWriting YARA rules CommentsStringsConditionsMore about rulesUsing modulesUndefined valuesExternal variablesIncluding filesModulesWriting your own modulesRunning YARA from the command-lineUsing YARA from PythonThe C API 非常棒的各类yara规则 https://github.com/InQuest/awesome-yara code GitHub - VirusTotal/yara at v4.2.2