You can test your Yara rules by using first the Yara command tool from windows or Linux.
The last version comes with source code :

For example, this rule shows us how to find files by size:

This rule finds files by specify the size conditions MB, KB and return the result.
Then can be tested with Yara command tool:

This shows us the rule is working well and can be used also with Yara python module.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.