yara-x 1.15.0

Python bindings for YARA-X

The official Python library for YARA-X. Supports Python 3.9+ in Linux, MacOS and Windows.

import yara_x

rules = yara_x.compile('''
  rule test { 
    strings: 
      $a = "foobar" 
    condition: 
      $a
  }''')

results = rules.scan(b"foobar")

assert results.matching_rules[0].identifier == "test"
assert results.matching_rules[0].patterns[0].identifier == "$a"
assert results.matching_rules[0].patterns[0].matches[0].offset == 0
assert results.matching_rules[0].patterns[0].matches[0].length == 6

For more information about how to use this library, please check the documentation.