"site:github.com filetype:yar" usually yields a few good ones. It's probably easier if you're more specific as to which specific use case you have in mind. And

"site:github.com filetype:yar" usually yields a few good ones. It's probably easier if you're more specific as to which specific use case you have in mind. And yes, Yara is a godsend. :)