capa2yara

[ruppde]

hi,

you might be interested in https://github.com/ruppde/yara_rules/tree/main/capa2yara as that converts many of the fine capa rules to yara (generated .yar in the repo are old). the script now lives on https://github.com/mandiant/capa/blob/master/scripts/capa2yara.py

sorry, I don't have enough time to contribute that properly.

regards
arnim

[fr0gger]

This is awesome thanks for sharing it :)