The pattern matching swiss knife
- Language
- C
- Licence
- BSD-3-Clause
- Stars
- 9.9k
- Latest
- v4.5.8
- Last push
- 2026-09-23
Scan files for malware with signatures, pattern rules or sandboxed execution.
Changes in this category (RSS)
| Tool | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|
| YARA | 9.9k | BSD-3-Clause | Open source | Yes | C | v4.5.8 | 2026-09-23 |
| ClamAV | 7.3k | GPL-2.0 | Open source | Yes | C | clamav-1.5.4 | 2026-08-27 |
| CAPE Sandbox | 3.6k | Other | Open source | Yes | Python | none | 2026-10-06 |
| Linux Malware Detect | 1.5k | GPL-2.0 | Open source | Yes | Shell | v2.0.1 | 2026-05-24 |
| YARA-X | 1.3k | BSD-3-Clause | Open source | Yes | Rust | v1.21.0 | 2026-10-06 |
5 tools
The pattern matching swiss knife
ClamAV - Documentation is here: https://docs.clamav.net
Malware Configuration And Payload Extraction
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
A rewrite of YARA in Rust.