A Python package and command line utility for scanning emails with YARA rules

Navigation

Verified details

These details have been verified by PyPI
Maintainers
Avatar for Sean.Whalen from gravatar.com Sean.Whalen

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Apache Software License
  • Author: Sean Whalen
  • Tags YARA, email, information security, infosec, security
  • Requires: Python >=3.7
Classifiers

Project description

yaramail logo

yaramail

Python tests PyPI PyPI - Downloads

yaramail is a Python package and command line utility for scanning emails with YARA rules. It is Ideal for automated triage of phishing reports.

Features

  • Scans all parts of an email via API or CLI
    • Headers
      • Removes header indents by default for consistent scanning
    • Plain text and HTML body content
      • Converts body content to Markdown by default for consistent scanning
    • Attachments
      • Raw file content
      • Emails attached to emails
      • PDF document text
      • ZIP file contents, including nested ZIP files
        • Uses message body content as a list of possible ZIP passwords
        • Customizable list of passwords to use when attempting to scan encrypted ZIP files
  • Provides a built-in methodology for categorizing emails
  • Parses Authentication-Results headers

Project details

Verified details

These details have been verified by PyPI
Maintainers
Avatar for Sean.Whalen from gravatar.com Sean.Whalen

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Apache Software License
  • Author: Sean Whalen
  • Tags YARA, email, information security, infosec, security
  • Requires: Python >=3.7
Classifiers

Release history Release notifications | RSS feed

3.2.0

3.1.10

3.1.9

3.1.8

3.1.7

3.1.6

3.1.5

3.1.4

This version

3.1.3

3.1.2

3.1.1

3.1.0

3.0.3

3.0.2

3.0.1

3.0.0

2.1.0

2.0.17

2.0.16

2.0.15

2.0.14

2.0.13

2.0.12

2.0.11

2.0.10

2.0.8

2.0.6

2.0.5

2.0.4

2.0.3

2.0.2

2.0.1

2.0.0

1.1.1

1.1.0

1.0.4

1.0.3

1.0.2

1.0.1

1.0.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

yara_mail-3.1.3.tar.gz (13.9 kB view details)

Uploaded Source

Built Distribution

yara_mail-3.1.3-py3-none-any.whl (14.7 kB view details)

Uploaded Python 3

File details

Details for the file yara_mail-3.1.3.tar.gz.

File metadata

  • Download URL: yara_mail-3.1.3.tar.gz
  • Upload date:
  • Size: 13.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: python-httpx/0.23.0

File hashes

Hashes for yara_mail-3.1.3.tar.gz
Algorithm Hash digest
SHA256 6588f935b558a9cf2eea8f3dd05ee7ffe3c40faff1feb39ca12fcf5173a07689
MD5 e00e7527456b912c70de0556b5fc99c6
BLAKE2b-256 498f92fcb9e93a1ac9bb540649c2f3a6c99a378320151f968b815917deb87cf5

See more details on using hashes here.

File details

Details for the file yara_mail-3.1.3-py3-none-any.whl.

File metadata

  • Download URL: yara_mail-3.1.3-py3-none-any.whl
  • Upload date:
  • Size: 14.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: python-httpx/0.23.0

File hashes

Hashes for yara_mail-3.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 2a7abe8dad82a80e4ce20e85f79c2e44e85465f52a7cb5b623762640f728ebaf
MD5 3af735bac2e11c2797f5ebbabfce1ff9
BLAKE2b-256 c16c100040bd8f0231e2f62e9ae6de1e019e0d9109d033522d0944c06c4a29d3

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page