Your files stay on your device

YARA rule validator

Parse YARA rules locally for syntax and structure errors plus slow-pattern warnings, listing includes without ever fetching them; sample rules included.

Paste a rule and press Validate rule.

What this validator checks, and what it does not
It parses the rule file the way YARA reads it: imports, includes, global and private rules, tags, meta, text and hex and regex strings with their modifiers, and the condition section. Syntax problems it reports are the ones a yarac compile would reject first, and the slow-pattern warnings cover the classic atom killers: text under four bytes, hex that is mostly wildcards, wide jumps, and regexes without a literal prefix. It does not compile the rule with libYARA, does not fully expression-parse conditions, does not scan any file, and never fetches an include target; includes are listed so you can paste them in yourself.OptionsValidate rule

More regex & cron tools

- Regex tester (/dev/regex-tester)
- JSON validator (/json/validator)
- Glob tester (/dev/glob-tester)
All regex & cron tools (/dev)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/dev/yara-rule-validator
Markdown version: https://nutter.tools/dev/yara-rule-validator.md
Plain-text version: https://nutter.tools/dev/yara-rule-validator.txt
Agent index: https://nutter.tools/llms.txt