A Python package and command line utility for scanning emails with YARA rules
Project description
yaramail
is a Python package and command line utility for scanning emails with
YARA rules. It is Ideal for automated triage of phishing reports.
Features
- Scans all parts of an email via API or CLI
- Headers
- Removes header indents by default for consistent scanning
- Plain text and HTML body content
- Converts body content to Markdown by default for consistent scanning
- Attachments
- Raw file content
- Emails attached to emails
- PDF document text
- ZIP file contents, including nested ZIP files
- Uses message body content as a list of possible ZIP passwords
- Customizable list of passwords to use when attempting to scan encrypted ZIP files
- Headers
- Provides a built-in methodology for categorizing emails
- Parses
Authentication-Results
headers
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
yara_mail-3.1.8.tar.gz
(14.1 kB
view details)
Built Distribution
yara_mail-3.1.8-py3-none-any.whl
(14.9 kB
view details)
File details
Details for the file yara_mail-3.1.8.tar.gz
.
File metadata
- Download URL: yara_mail-3.1.8.tar.gz
- Upload date:
- Size: 14.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: python-httpx/0.23.0
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | ee599561f1b2fd85205746c3f35234ecb27f1e16325821db9c3c6f8ae8fd16e5 |
|
MD5 | 6ef7577d14183ce4c7fd16d9d8d92a65 |
|
BLAKE2b-256 | e4a1a32def46b9e83b95069c3037456fbbf43f8cd2e90a5a4c224d9fe7f49dc1 |
File details
Details for the file yara_mail-3.1.8-py3-none-any.whl
.
File metadata
- Download URL: yara_mail-3.1.8-py3-none-any.whl
- Upload date:
- Size: 14.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: python-httpx/0.23.0
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | 34d7a0ef916cebe61d6308cba5b399fb5bb8cd0d46fdd319d90022e9bb44c0e8 |
|
MD5 | 6221e1bf75264150449eb1dcf089e12f |
|
BLAKE2b-256 | 1a0eee4b96e5c4a963178f4826115685839b61ac99c69fbb2fa62239525fadd0 |