Open KLara is a community-driven fork of KLara by Kaspersky Lab — a distributed system for scanning large malware collections with Yara rules.
This project is maintained by the community and is not affiliated with Kaspersky Lab.
- Web Interface — Fire-and-forget Yara scans with email notifications (docs)
- REST API — Programmatic job submission and result retrieval (docs)
- Distributed Scanning — Dispatcher-worker model that scales across commodity hardware (architecture)
See the Quick Start Tutorial to get up and running.
For full installation instructions, see the Installation Guide.
Full documentation lives in docs/, organized by the Diátaxis framework:
| Section | Description |
|---|---|
| Tutorials | Step-by-step guides for getting started |
| How-To Guides | Task-oriented guides (installation, advanced usage, process management) |
| Reference | API, architecture, configuration, database schema |
| Explanation | Design decisions and performance concepts |
Contributions are welcome! Please open a PR or file an issue on GitHub.
- Telegram: #open_klara
- Issues: Report bugs
- PRs: Contribute code
- Open KLara: xdanx (maintainer), gajeshbhat (maintainer)
- Original KLara: Kaspersky Lab's GReAT Team — Costin, Marco, Vitaly, Sergey, Alex@grep
- Yara: VirusTotal
See LICENSE for details.
Happy hunting! 🎯