holloman3 vs yara-x vs syara-x

Content fingerprinting via Hilbert curve mapping and Lanczos-3 downsampling. Produces compact 16-byte fingerprints for file identification, clustering, deduplication, and threat detection. AVX2-accelerated on x86_64. Zero dependencies. Used by the holloman YARA-X module.

A pure Rust implementation of YARA.

Super YARA — extends YARA-compatible rules with semantic, classifier, and LLM-based matching