yara

There are 20 repositories under yara topic.

VirusTotal / yara
The pattern matching swiss knife
yara
Language:C 7715
InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
yara-rules yara-signatures yara malware-rules malware-analysis malware-research malware-detection yara-scanner yara-manager threat-hunting awesome awesome-yara awesome-list ioc
3278
Neo23x0 / Loki
Loki - Simple IOC and YARA Scanner
python yara signature scanner ioc otx antivirus hash yara-rules dfir
Language:Python 3251
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
signature yara-rules ioc scanner yara anti-virus hash threat-hunting threat-intelligence dfir
Language:YARA 2347
DIE-engine
horsicq / DIE-engine
DIE engine
signature reverse-engineering unpacker yara elf program-analysis binary-analysis disassembler entropy hacktoberfest hacktoberfest22
Language:C++ 2133
APKiD
rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
android antivirus machine-learning malware-detection malware-analysis malware-research yara yara-forensics packers android-protection android-protect-apps rasp appshielding
Language:YARA 1909
eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
ioc malware misp yara
Language:YARA 1505
Neo23x0 / yarGen
yarGen is a generator for YARA rules
malware malware-analysis malware-research malwareanalysis python yara
Language:Python 1461
jvoisin / php-malware-finder
Detect potentially malicious PHP files
yara php malware webshell antivirus
Language:PHP 1457
airbnb / binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
aws lambda malware-detection security serverless terraform yara
Language:Python 1380
deepfence / YaraHunter
🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍
devsecops devsecops-best-practices devsecops-pipeline ioc malware threat-hunting yara yara-scanner ci-cd hacktoberfest
Language:Go 1230
curated-intel / Ukraine-Cyber-Operations
Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
ukraine osint cti threat-intelligence iocs threat-hunting yara malware
Language:YARA 907
strelka
target / strelka
Real-time, container-based file scanning at enterprise scale
cfc detection golang python3 security target-cfc yara
Language:Python 804
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform yara soar
Language:Python 790
reversinglabs-yara-rules
reversinglabs / reversinglabs-yara-rules
ReversingLabs YARA Rules
reverse-engineering yara-rules yara-signatures ransomware-detection ransomware-prevention malware-detection indicators-of-compromise yara
Language:YARA 699
VirusTotal / yara-python
The Python interface for YARA
yara
Language:C 625
mitre / multiscanner
Modular file scanning/analysis framework
python analytic-machines analysis-framework python-script linux scanning antivirus metadata yara malware malware-analysis malware-analyzer malware-research cuckoo
Language:Python 610
WerWolv / ImHex-Patterns
Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor
constants data-structures encoding formats hacktoberfest imhex magic pattern-language patterns yara
Language:Rust 540
advanced-threat-research / Yara-Rules
Repository of YARA rules made by Trellix ATR Team
yara iocs threat-hunting threat-intelligence
Language:YARA 538
InQuest / iocextract
Defanged Indicator of Compromise (IOC) Extractor.
ioc indicators-of-compromise library ioc-extractor defang threat-intelligence threat-sharing threatintel malware-research osint dfir base64 decoding yara
Language:Python 488
wgpsec / whohk
whohk，linux下一款强大的应急响应工具在linux下的应急响应往往需要通过繁琐的命令行来查看各个点的情况，有的时候还需要做一些格式处理，这对于linux下命令不是很熟悉的人比较不友好。本工具将linux下应急响应中常用的一些操作给集合了起来，并处理成了较为友好的格式，只需要通过一个参数就能代替繁琐复杂的命令来实现对各个点的检查。
python yara
Language:YARA 435
freki
cristianzsh / freki
:wolf: Malware analysis platform
malware malware-analysis yara python3 flask virustotal reverse-engineering docker self-hosted self-hosting self-hosted-api static-analysis threat-intelligence binary-analysis malware-research hacktoberfest
Language:YARA 408
CERT-Polska / mquery
YARA malware query accelerator (web frontend)
yara malware database security-tools security-automation
Language:Python 402
PUNCH-Cyber / stoq
An open source framework for enterprise level automated analysis.
yara malware-analysis malware-analyzer malware-detection framework security-automation malware-research automation-framework
Language:Python 394
V1D1AN / S1EM
This project is a SIEM with SIRP and Threat Intel, all in one.
kibana elasticsearch logstash filebeat suricata zeek opencti misp malware sigma thehive docker cortex arkime mwdb n8n zircolite yara velociraptor
Language:Shell 389
c3rb3ru5d3d53c / binlex
A Binary Genetic Traits Lexer Framework
malware malware-research malware-analysis yara genetic-algorithm machine-learning genetic-programming reverse-engineering
Language:C++ 383
SupportIntelligence / Icewater
16,432 Free Yara rules created by
yara malware-analysis cluster threat dna
Language:YARA 378
InQuest / yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
yara yara-rules threat-hunting yara-signatures
Language:Python 355
go-yara
hillu / go-yara
Go bindings for YARA
cgo go golang hacktoberfest yara
Language:Go 346
bartblaze / Yara-rules
Collection of private Yara rules.
yara-rules yara-signatures yara malware-detection ransomware-detection threat-hunting threat-intelligence
Language:YARA 301
BayshoreNetworks / yextend
Yara integrated software to handle archive file data.
yara-integrated yara
Language:C++ 291
volexity / threat-intel
Signatures and IoCs from public Volexity blog posts.
snort-rules suricata-rules threat-intelligence yara yara-rules
Language:Python 287
EmersonElectricCo / fsf
File Scanning Framework
file-analysis file-analyzer network-defense security-tools yara
Language:Python 282
hyuunnn / Hyara
Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
ida-plugin idapython-plugin idapython yara cutter cutter-plugin binaryninja binaryninja-plugin yara-rules ida idapro ida-pro ghidra ghidra-extension ghidra-plugin
Language:Python 214
evilsocket / sauron
A minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules.
malware scanner signature signatures virus yara
Language:Rust 189
PUNCH-Cyber / YaraGuardian
Django web interface for managing Yara rules
yara rules manager metrics yara-rules yara-manager yara-metrics
Language:Python 188