{"id":13706077,"url":"https://github.com/3c7/yaramanager","last_synced_at":"2025-12-30T17:42:47.409Z","repository":{"id":46555360,"uuid":"351585188","full_name":"3c7/yaramanager","owner":"3c7","description":"Simple yara rule manager","archived":true,"fork":false,"pushed_at":"2022-12-27T17:39:10.000Z","size":250,"stargazers_count":66,"open_issues_count":3,"forks_count":7,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-19T13:47:19.745Z","etag":null,"topics":["cli","sqlite","yara"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/3c7.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-03-25T21:51:16.000Z","updated_at":"2025-02-06T12:23:19.000Z","dependencies_parsed_at":"2023-01-31T04:46:01.772Z","dependency_job_id":null,"html_url":"https://github.com/3c7/yaramanager","commit_stats":null,"previous_names":[],"tags_count":22,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/3c7%2Fyaramanager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/3c7%2Fyaramanager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/3c7%2Fyaramanager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/3c7%2Fyaramanager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/3c7","download_url":"https://codeload.github.com/3c7/yaramanager/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":252563153,"owners_count":21768413,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cli","sqlite","yara"],"created_at":"2024-08-02T22:00:51.928Z","updated_at":"2025-12-14T04:37:49.845Z","avatar_url":"https://github.com/3c7.png","language":"Python","funding_links":[],"categories":["Tools"],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n\n![License:MIT](https://img.shields.io/github/license/3c7/yaramanager?style=flat-square\u0026color=blue) \n![Version](https://img.shields.io/pypi/v/yaramanager?style=flat-square\u0026color=blue)\n![PyPI - Downloads](https://img.shields.io/pypi/dm/yaramanager?color=blue\u0026style=flat-square)\n[![Awesome Yara](https://img.shields.io/static/v1?label=awesome\u0026message=yara\u0026style=flat-square\u0026color=ff69b4\u0026logo=awesome-lists)](https://github.com/InQuest/awesome-yara)\n\n\u003c/div\u003e\n\n# Yara Manager\nA simple program to manage your yara ruleset in a database. By default sqlite will be used, but using MySQL/MariaDB or\nPostgres is also possible.\n\n## Todos\n- [ ] Implement backup and sharing possibilities\n\n## Installation\nInstall it using pip:\n```shell\npip install yaramanager\n```\nOr grab one of the prebuilt binaries from the release page.\n\n**If you want to use other databases than SQLite, you need to install the specific extra dependencies:**\n\n```shell\npip install yaramanager[mysql]\npip install yaramanager[pgsql]\n```\n\n## Configuration\nYara Manager creates a fresh config if none exists. If you update from an older version, please pay attention to freshly\nadded [config options](resources/config.toml). You can reset you configuration using `ym config reset`, however, this\nwill also overwrite any custom changes you made.  \n\n```toml\n## Editor\n# editor contains the command used to start the editor. Note that this must be a list of the command and the needed\n# parameters, e.g. `editor = [\"codium\", \"-w\"]`.\neditor = [ \"codium\", \"-w\" ]\n```\nThe most important configuration to change is probably your editor. The default configuration uses `codium -w` for \nopening rules. You can use e.g. `EDITOR=vim DISABLE_STATUS=1 ym config edit` to open you config in Vim (and you can type\n`:wq` to save your changes and quit :P). After changing the editor path, you are good to go! The following asciinema\nshows how to quickly overwrite the editor set in the config:\n\n[![Asciinema: Temporarily overwrite the used editor.](https://asciinema.org/a/auX5tjpeUiHCnsfCrO0MEPRY9.svg)](https://asciinema.org/a/auX5tjpeUiHCnsfCrO0MEPRY9)\n\n```toml\n# Databases\n# A list of databases. Every database needs to define a driver and a path, such as\n#\n# [[yaramanager.db.databases]]\n# driver = \"sqlite\"\n# path = \"/home/user/.config/yaramanager/data.db\"\n[[yaramanager.db.databases]]\ndriver = \"sqlite\"\npath = \"/home/3c7/.config/yaramanager/myrules.db\"\n```\nIf you want to use multiple databases (which is pretty useful if you use rules from different sources or with different \nclassifications), you can add them to the config file, too.\n\nIn order to use MySQL/MariaDB or Postgres, you need to specify the specific database driver, e.g.:\n\n```toml\n[[yaramanager.db.databases]]\ndriver = \"mysql+pymysql\"\npath = \"user:password@127.0.0.1/database\"\n[[yaramanager.db.databases]]\ndriver = \"postgresql+psycopg2\"\npath = \"user:password@127.0.0.1/database\"\n```\n\n## Features\n### General usage\n```\n$ ym\nUsage: ym [OPTIONS] COMMAND [ARGS]...\n\n  ym - yaramanager. Use the commands shown below to manage your yara\n  ruleset. By default, the manager uses codium as editor. You can change\n  that in the config file or using EDITOR environment variable. When using\n  editors in the console, you might want to disable the status display using\n  DISABLE_STATUS.\n\nOptions:\n  --help  Show this message and exit.\n\nCommands:\n  add      Add a new rule to the database.\n  config   Review and change yaramanager configuration.\n  db       Manage your databases\n  del      Delete a rule by its ID or name.\n  edit     Edits a rule with your default editor.\n  export   Export rules from the database.\n  get      Get rules from the database.\n  help     Displays help about commands\n  list     Lists rules available in DB.\n  new      Create a new rule using you preferred editor.\n  parse    Parses rule files.\n  read     Read rules from stdin.\n  ruleset  Manage your rulesets\n  scan     Scan files using your rulesets.\n  search   Searches through your rules.\n  stats    Prints stats about the database contents.\n  tags     Show tags and the number of tagged rules\n  version  Displays the current version.\n```\n\n### Yara Manager Showcase\n[![Asciiname: Yara Manager showcase](https://asciinema.org/a/8QbXQoBEeJIwVcf2mWqiRTNBj.svg)](https://asciinema.org/a/8QbXQoBEeJIwVcf2mWqiRTNBj)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F3c7%2Fyaramanager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F3c7%2Fyaramanager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F3c7%2Fyaramanager/lists"}