This blag post covers scanning the Ghidra virtual memory with YARA.

What is YARA

YARA is the industry standard when it comes to signatures matching on malware. If you don’t know YARA: It’s a simple pattern-matching language that has some features tailored for searching in binary data. Logical expressions for matches and the capability to match on parsed structures of some common executable formats are a few examples of such features.

rule hello_yara {
    strings:
        $a = "Hello"
        $b = …