Skip to content
yararules.org
Menu

Glossary

Rule tag

Tags are labels declared after a YARA rule name; they do not affect matching and are used to filter and group results.

Tags follow the rule identifier after a colon: rule MAL_Example : windows loader. They are reported with matches, and scanners can filter on them (for example only run rules tagged memory). They never influence whether a rule matches.

Browse the tag pages of the library to see how public rule sets use them.