yara

There are 21 repositories under yara topic.

VirusTotal / yara
The pattern matching swiss knife
yara
Language:C 7965
InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
yara-rules yara-signatures yara malware-rules malware-analysis malware-research malware-detection yara-scanner yara-manager threat-hunting awesome awesome-yara awesome-list ioc
3389
Neo23x0 / Loki
Loki - Simple IOC and YARA Scanner
antivirus dfir hash ioc otx python scanner signature yara yara-rules
Language:Python 3301
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules
Language:YARA 2395
DIE-engine
horsicq / DIE-engine
DIE engine
signature reverse-engineering unpacker yara elf program-analysis binary-analysis disassembler entropy hacktoberfest hacktoberfest22
Language:C++ 2225
APKiD
rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
android android-protect-apps android-protection antivirus appshielding machine-learning malware-analysis malware-detection malware-research packers rasp yara yara-forensics
Language:YARA 1969
eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
ioc malware misp yara
Language:YARA 1576
Neo23x0 / yarGen
yarGen is a generator for YARA rules
malware malware-analysis malware-research malwareanalysis python yara
Language:Python 1493
jvoisin / php-malware-finder
Detect potentially malicious PHP files
antivirus malware php webshell yara
Language:PHP 1462
airbnb / binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
security yara serverless terraform lambda aws malware-detection
Language:Python 1398
deepfence / YaraHunter
🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍
devsecops devsecops-best-practices devsecops-pipeline ioc malware threat-hunting yara yara-scanner ci-cd hacktoberfest
Language:Go 1233
curated-intel / Ukraine-Cyber-Operations
Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
cti iocs malware osint threat-hunting threat-intelligence ukraine yara
Language:YARA 911
strelka
target / strelka
Real-time, container-based file scanning at enterprise scale
cfc detection golang python3 security target-cfc yara
Language:Python 820
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform yara soar
Language:Python 805
reversinglabs-yara-rules
reversinglabs / reversinglabs-yara-rules
ReversingLabs YARA Rules
indicators-of-compromise malware-detection ransomware-detection ransomware-prevention reverse-engineering yara yara-rules yara-signatures
Language:YARA 724
VirusTotal / yara-python
The Python interface for YARA
yara
Language:C 638
mitre / multiscanner
Modular file scanning/analysis framework
python analytic-machines analysis-framework python-script linux scanning antivirus metadata yara malware malware-analysis malware-analyzer malware-research cuckoo
Language:Python 616
WerWolv / ImHex-Patterns
Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor
constants data-structures encoding formats hacktoberfest imhex magic pattern-language patterns yara
Language:Rust 604
advanced-threat-research / Yara-Rules
Repository of YARA rules made by Trellix ATR Team
iocs threat-hunting threat-intelligence yara
Language:YARA 552
InQuest / iocextract
Defanged Indicator of Compromise (IOC) Extractor.
ioc indicators-of-compromise library ioc-extractor defang threat-intelligence threat-sharing threatintel malware-research osint dfir base64 decoding yara
Language:Python 491
wgpsec / whohk
whohk，linux下一款强大的应急响应工具在linux下的应急响应往往需要通过繁琐的命令行来查看各个点的情况，有的时候还需要做一些格式处理，这对于linux下命令不是很熟悉的人比较不友好。本工具将linux下应急响应中常用的一些操作给集合了起来，并处理成了较为友好的格式，只需要通过一个参数就能代替繁琐复杂的命令来实现对各个点的检查。
python yara
Language:YARA 456
freki
cristianzsh / freki
:wolf: Malware analysis platform
binary-analysis docker flask hacktoberfest malware malware-analysis malware-research python3 reverse-engineering self-hosted self-hosted-api self-hosting static-analysis threat-intelligence virustotal yara
Language:YARA 416
CERT-Polska / mquery
YARA malware query accelerator (web frontend)
database malware security-automation security-tools yara
Language:Python 405
V1D1AN / S1EM
This project is a SIEM with SIRP and Threat Intel, all in one.
kibana elasticsearch logstash filebeat suricata zeek opencti misp malware sigma thehive docker cortex arkime mwdb n8n zircolite yara velociraptor
Language:Shell 400
PUNCH-Cyber / stoq
An open source framework for enterprise level automated analysis.
automation-framework framework malware-analysis malware-analyzer malware-detection malware-research security-automation yara
Language:Python 396
c3rb3ru5d3d53c / binlex
A Binary Genetic Traits Lexer Framework
malware malware-research malware-analysis yara genetic-algorithm machine-learning genetic-programming reverse-engineering
Language:C++ 384
SupportIntelligence / Icewater
16,432 Free Yara rules created by
cluster dna malware-analysis threat yara
Language:YARA 381
InQuest / yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
threat-hunting yara yara-rules yara-signatures
Language:Python 358
go-yara
hillu / go-yara
Go bindings for YARA
yara go golang cgo hacktoberfest
Language:Go 354
bartblaze / Yara-rules
Collection of private Yara rules.
malware-detection ransomware-detection threat-hunting threat-intelligence yara yara-rules yara-signatures
Language:YARA 311
volexity / threat-intel
Signatures and IoCs from public Volexity blog posts.
yara threat-intelligence yara-rules suricata-rules snort-rules
Language:Python 299
BayshoreNetworks / yextend
Yara integrated software to handle archive file data.
yara yara-integrated
Language:C++ 292
EmersonElectricCo / fsf
File Scanning Framework
security-tools network-defense file-analysis file-analyzer yara
Language:Python 283
EgeBalci / deoptimizer
Evasion by machine code de-optimization.
antivirus detection evasion malware redteaming security snort suricata yara
Language:Rust 239
hyuunnn / Hyara
Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
binaryninja binaryninja-plugin cutter cutter-plugin ghidra ghidra-extension ghidra-plugin ida ida-plugin ida-pro idapro idapython idapython-plugin yara yara-rules
Language:Python 221
evilsocket / sauron
A minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules.
malware scanner signature signatures virus yara
Language:Rust 198