A Python package and command line utility for scanning emails with YARA rules
Project description
yaramail
is a Python package and command line utility for scanning emails with
YARA rules. It is Ideal for automated triage of phishing reports.
Features
- Scans all parts of an email via API or CLI
- Headers
- Removes header indents by default for consistent scanning
- Plain text and HTML body content
- Converts body content to Markdown by default for consistent scanning
- Attachments
- Raw file content
- Emails attached to emails
- PDF document text
- ZIP file contents, including nested ZIP files
- Uses message body content as a list of possible ZIP passwords
- Customizable list of passwords to use when attempting to scan encrypted ZIP files
- Headers
- Provides a built-in methodology for categorizing emails
- Parses
Authentication-Results
headers
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
yara_mail-2.1.0.tar.gz
(14.0 kB
view hashes)
Built Distribution
yara_mail-2.1.0-py3-none-any.whl
(14.8 kB
view hashes)
Close
Hashes for yara_mail-2.1.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | ee2f36884c85fb5a90daffdf147e0373439b6610c0d030b9409b1f8418950267 |
|
MD5 | 8587f7a2a405296bc7ea95f261502f9e |
|
BLAKE2b-256 | 68e51e81d0124216dc11fbf65e8ef27611bbe8a32b9371171e11c808c95b31c4 |