A tool primarily used in malware research and detection that provides a rule-based approach to create descriptions of malware families based on textual or binary patterns.