Deploy YARA-X to Microsoft Intune

Published by VirusTotal in Security

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor.

Publisher: VirusTotal
Homepage: Visit publisher website
License: BSD-3-Clause
Category: Security

Deployment details

Latest version: 1.22.1
Installer type: zip
Install command: .\payload\Invoke-AppDeployToolkit.exe
Uninstall command: .\payload\Invoke-AppDeployToolkit.exe -DeploymentType Uninstall
Detection rule: The exact Intune detection rules generated for this PSADT package
App source: win32

Commands and arguments were captured during an automated QA install of version 1.22.0 in an isolated Windows VM.

Tested by IntuneGet QA

Passed

Version 1.22.0 tested on October 22, 2026.

VirusTotal scan of the installer hash: clean. 0 of 66 engines flagged it.

Package provenance

Installer SHA-256: EAC36A58699B94D3732A7FE1D8453FE89E0077BB18AC2C99B4C2EE102A431F2ECheck on VirusTotal
PSADT version: 4.1.8
Packaging commit: 1cc5fb513c
Package profile: E0E00EE7AA52C23B...

IntuneGet verifies the installer SHA-256 before packaging and does not store the installer. The full evidence, including the recorded hash, is in the QA report.

Recent versions

1.22.1
1.18.0
1.17.0
1.14.0
1.13.0

How deployment works

IntuneGet packages YARA-X as a Win32 app and uploads it directly to your Microsoft Intune tenant. You review the package settings, configure assignments, and start the deployment from one guided workflow.