Is there any sites to get static rules to detect malware files? static behavior rules for detecting malware files.

Thanks in advance.

closed as too broad by perror, Paweł Łukasik, kn0x, peter ferrie, Megabeets Feb 4 '18 at 12:17

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.


You can create or download tools to scan files with YARA rules. There are many repositories on github with custom rules and you can also get the ClamAV database, which is all in YARA. I think Kaspersky's database is also available in YARA rules. You can also use Loki; a fine tool for incident response which does this job and many more!

Not the answer you're looking for? Browse other questions tagged or ask your own question.