Write and Test YARA Rules Against a File, In the Browser YARA
YARA is how analysts write detections. This runs the match in the browser, so a rule can be tried against a real, sensitive sample without the sample ever leaving the machine.
The rules
The sample
Drop a file here, or open one
No sample yet — or paste text below.
Results
What it runs, and what it does not
This matches strings-and-condition rules exactly: text with nocase/wide/ascii/fullword, hex with ?? and [n] jumps, regex with i/s flags, and conditions with and/or/not, any/all/N of them, #a counts and filesize. It does not implement YARA's pe./elf./math. modules or offset operators — for those, and to sign off a finished rule, use the yara binary. Everything here stays in the browser.