Ok, I keep finding things to improve and shaving that yak. I should probably just go ahead and publish this, or this will take forever.

So officially, I've indexed the whole vxunderground's VirusShare collection and created a public service to search all that data: https://mquery.net. If malware is your thing, check it out.

mquery | CERT.PL>_

It can YARA-scan 22MM files in a minute (and sometimes more and sometimes it doesn't work at all). At least when used by 1 person. Running `yara -r` on the same data is like 10 hours. You can use https://github.com/Neo23x0/signature-base/tree/master/yara for tests.

Remember that the default account is *shared* and other users see your jobs. Consider registering a throwaway account (fake email ok).

Oh, and I'm posting this on mastodon before birdsite to ~~manage the load~~ help the fediverse.