PYAS Security
PYAS is a source-available Windows endpoint-security application that combines YARA rules, PE machine-learning classification, digital-signature checks, optional cloud analysis and a kernel-mode driver to detect and block malware.
PYAS Security is a Windows endpoint-security project that layers several detection and protection methods in one desktop application: local PE-file machine-learning inference, YARA-based matching, digital-signature inspection, optional cloud analysis, real-time user-mode monitoring, and a native minifilter driver written in C++.
The project is meant both as a usable security application and as an engineering platform for studying malware detection, Windows internals, rule-driven prevention, model training and file analysis. Operational features include quarantine, allow and block lists, system repair, startup management and activity reporting, alongside model-training utilities, an online analysis service, an API client and a rule editor for building detection content.