YARA-X is a rule engine in the YARA ecosystem. It is relevant when you need to evaluate rule processing with the newer implementation, but the compatibility boundary must be checked for the exact syntax and version you use. Preserve the rules and test corpus. A successful scan returns matches for that input; it is not a general certification of detection quality.
Compare on your corpus
Run a controlled set of permitted positive and negative examples and record engine versions. Investigate discrepancies instead of assuming every YARA rule has identical behavior in YARA-X.
Limits
Feature support and release behavior can change. Review current project documentation before migration, and retain a fallback for rules that have not been validated against the new engine.
Requirements & evidence
- Resource type
- Tool
- Category
- Malware analysis
- Host platforms
- Unknown
- Targets
- native
- Level
- Unknown
- Price / availability
- Unknown
- License
- BSD-3-Clause
- Interface
- Unknown
- Input formats
- Unknown
- Architectures
- Unknown
- REA integration
- Unknown
- MCP support
- Unknown
- Maintenance
- Unknown
- Repository activity
- 2026-11-04T09:44:59Z
- Archived
- No
- Source checked
- 2026-11-04T10:07:13.932938+00:00
Relationship to YARA is product-specific; do not assume full compatibility.
Latest observed repository release: v1.22.1. Latest GitHub release in this repository; may belong to one component, not the entire product.
Repository: Official repository
Primary sources
- https://api.github.com/repos/VirusTotal/yara-x
- https://raw.githubusercontent.com/virustotal/yara-x/main/README.md
- https://raw.githubusercontent.com/virustotal/yara-x/main/LICENSE
Source descriptions establish documented scope. They do not establish that every workflow has been reproduced by AI Craft Pad.