Yara WorkBench is an Integrated Development Environment (IDE) for developing Yara signatures.
This tool allows you to quickly write and test new match signatures.
code completion for internal functions and modules
extensible type system for custom modules
ability to scan individual files or directories
bench marking statistics for each file
number of rules and signature matches per file
shows file offset and PE virtual address for each match
hexdump and 32/64 bit PE disassembly per match
quickly determine match quality
dump module information
test rules against multiple old yara versions
navigator form to extract and jump to specific rules
easily sort and move samples by rule and match status
Screen shots (Click to enlarge)
Yara WorkBench is shareware and installs as a 10 day trial. If you would like to continue to use
Yara WorkBench after the trial period is over you can purchase a license for $12 per user.
If your interested in bulk license purchases contact me for more details.
Yara WorkBench is compatible with all Windows operating systems from XP SP3 - Windows 10.