Yara

• yara(1) find files matching patterns and rules written in a special-purpose
• yarac(1) yarac - compile rules to yara