YARA-X Rule Authoring
**Why this works:** Different indicator types have different confidence levels. A single C2 domain might be definitive, while you need multiple library imports to be confident. Grouping by `$a*`, `$b*...
LLM Evaluation
Evaluated by: xiaomi/mimo-v2-flash:free
Last evaluated: March 29, 2026
Prompt Preview
---
name: yara-rule-authoring
description: >
Guides authoring of high-quality YARA-X detection rules for malware identification.
Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions,
string selection, performance optimization, migration from legacy YARA, and false
positive reduction. Triggers on: YARA, YARA-X, malware detection, threat hunting,
IOC, signature, crx module, dex module.
---
# YARA-X Rule Authoring
Write detection rules that catch malware with...Full prompt length: 26219 characters
Tools & Technologies
- JavaScript
- Rust