What is YARA-L?

YARA-L is a domain-specific language used for malware analysis and threat hunting. It allows security researchers and analysts to create rules that describe patterns and characteristics of malware families based on textual or binary patterns. These rules can then be used to identify or classify malware samples. YARA-L is the successor to YARA and incorporates features that enables it to scale well and efficiently address use cases such as retrospective hunting, live hunting and integration in threat intelligence platforms.