yara/generate.py

def generate_yara(result):
    indicators = result["indicators"]

    rule = f"""
rule AutoGenerated_Malware {{
    meta:
        author = "MicroCyberLLM"
        confidence = "{result['confidence']}"
    strings:
"""
    for i, ind in enumerate(indicators):
        rule += f'        $s{i} = "{ind}"\n'

    rule += """
    condition:
        any of them
}
"""
    return rule