Skip to content

Glossary

Meta section

The meta section of a YARA rule stores documentation as key/value pairs: description, author, date, reference, hashes and more.

The meta: section holds key/value pairs whose values are strings, integers or booleans. Keys may repeat (for example several hash entries). Meta values never influence matching and cannot be used in the condition, but scanners report them with every match.

Common keys are description, author, date, modified, reference, id, hash, score and license; the style guide describes them.