Highlights

Does not require yara to be deployed (embeds all needed native dependencies)
Supports two modes of operation:
- External: yara binary extracted and executed as a child process
- Embedded: yara jnilib runs embedded in the java process
Rules can be loaded as strings, files or archives; for archives will recursively look for and load all yara rule files
Matches are returned with identifier, metadata and tags
Negate, timeout and limit supported

How to build

Example (building from 3.10.0 version)

git clone https://github.com/virustotal/yara.git
cd yara
git checkout tags/v3.10.0
./bootstrap.sh
./configure --disable-shared
make

Example (in "yara" folder):

git clone https://github.com/p8a/yara-java.git
cd yara-java
git checkout tags/v3.10.0
mvn clean install

See the unit tests