yara-rules

There are 5 repositories under yara-rules topic.

InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
awesome awesome-list awesome-yara ioc malware-analysis malware-detection malware-research malware-rules threat-hunting yara yara-manager yara-rules yara-scanner yara-signatures
3446
Neo23x0 / Loki
Loki - Simple IOC and YARA Scanner
antivirus dfir hash ioc otx python scanner signature yara yara-rules
Language:Python 3318
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules
Language:YARA 2423
sroberts / awesome-iocs
A collection of sources of indicators of compromise.
awesome awesome-list ioc signature yara-rules
Language:Shell 777
reversinglabs-yara-rules
reversinglabs / reversinglabs-yara-rules
ReversingLabs YARA Rules
reverse-engineering yara-rules yara-signatures ransomware-detection ransomware-prevention malware-detection indicators-of-compromise yara
Language:YARA 739
KasperskyLab / klara
Kaspersky's GReAT KLara
yara-rules klara threat-intelligence threat-hunting
Language:PHP 692
InQuest / yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
threat-hunting yara yara-rules yara-signatures
Language:Python 360
bartblaze / Yara-rules
Collection of private Yara rules.
malware-detection ransomware-detection threat-hunting threat-intelligence yara yara-rules yara-signatures
Language:YARA 316
volexity / threat-intel
Signatures and IoCs from public Volexity blog posts.
yara threat-intelligence yara-rules suricata-rules snort-rules
Language:Python 306
sapphirex00 / Threat-Hunting
Personal compilation of APT malware from whitepaper releases, documents and own research
threat-hunting threat-intelligence threat-sharing threat-modeling collection malware malware-analysis malware-research yara-rules malware-detection
253
hyuunnn / Hyara
Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
ida-plugin idapython-plugin idapython yara cutter cutter-plugin binaryninja binaryninja-plugin yara-rules ida idapro ida-pro ghidra ghidra-extension ghidra-plugin
Language:Python 222
roadwy / DefenderYara
Extracted Yara rules from Windows Defender mpavbase and mpasbase
antivirus defender dfir ioc malware-analysis threat-intelligence yara yara-rules yara-signatures
Language:YARA 194
PUNCH-Cyber / YaraGuardian
Django web interface for managing Yara rules
yara rules manager metrics yara-rules yara-manager yara-metrics
Language:Python 188
plyara / plyara
Parse YARA rules and operate over them more easily.
yara yara-rules parser yara-parser lexer ply python python3 sly
Language:Python 172
Xumeiquer / yara-forensics
Set of Yara rules for finding files using magics headers
forensics yara yara-rules dump-files magic-headers yara-forensics
Language:YARA 134
alt3kx / wafaray
Enhance your malware detection with WAF + YARA (WAFARAY)
blueteam blueteaming pentesting security-tools threat-intelligence threathunting waf yara yara-rules
Language:Shell 107
Hestat / lw-yara
Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
lw-yara yara-rules malware-detection signature dfir
Language:YARA 100
michelcrypt4d4mus / yaralyzer
Visually inspect and force decode YARA and regex matches found in both binary and text data. With Colors.
malware malware-analysis malware-detection reverse-engineering visualization yara yara-forensics yara-scanner blueteam dfir hacking-tool netsec netsec-tools yara-format yara-integrated yara-rules
Language:Python 100
sbousseaden / YaraHunts
Random hunting ordiented yara rules
threat-hunting yara-rules
Language:YARA 95
InQuest / ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
yara-rules yara yara-manager malware-research yara-signatures
Language:JavaScript 94
blackberry / threat-research-and-intelligence
BlackBerry Threat Research & Intelligence
artificial-intelligence iocs machine-learning research sigma-rules suricata-rules threatintelligence yara-rules
Language:Jupyter Notebook 90
Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
antivirus csharp forensic-analysis forensics forensics-investigations forensics-level-scanning mft query-language scanner security threat-hunting threat-monitor yara yara-rules yara-scanner
Language:C# 79
RussianPanda95 / Yara-Rules
Repository of Yara Rules
malware-detection malware-research yara-rules
Language:YARA 79
CIRCL / factual-rules-generator
Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
computer-forensics dfir yara yara-rules
Language:Python 73
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 73
ThreatLabz / iocs
This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
iocs malware-research malware-samples yara yara-rules
Language:YARA 64
kweatherman / yara4ida
Unofficial YARA IDA Pro plugin, along with an unparalleled crypto/hash/compression rule set based on Luigi Auriemma's signsrch signatures.
cryptography reverse-engineering ida-plugin yara-rules yara-scanner
Language:YARA 62
iomoath / yara-scanner
YaraScanner is a file pattern-matching tool based on YARA rules.
yara-scanner yara-rules threat-hunting python3
Language:Python 53
t4d / PhishingKit-Yara-Search
Yara scan Phishing Kit's Zip archive(s)
yara yara-scanner yara-rules phishing phishing-detection phishing-kit phishing-sites
Language:Python 51
lprat / static_file_analysis
Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules
analysis yara-rules clamav malware-analysis security-tools security static-analysis defensive-security sigma yara docker
Language:YARA 48
bartblaze / FARA
Repository that contains a set of purposefully erroneous Yara rules.
yara yara-rules yara-signatures
Language:YARA 47
thewhiteninja / yarasploit
YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.
yara yara-rules yara-signatures metasploit shellcode python linux windows api
Language:YARA 42
deadbits / yara-rules
Collection of YARA signatures from individual research
yara yara-rules yara-signatures malware-analysis malware-research malware-detection malware-protection
Language:YARA 41
bandrel / OCyara
Performs OCR on image files and scans them for matches to YARA rules
yara tesseract ocr optical-character-recognition python-3 python yara-rules tesseract-ocr-api
Language:Python 39
CIRCL / yara-validator
Validates yara rules and tries to repair the broken ones.
yara yara-rules dfir
Language:Python 38
pseudo-security / slacksecrets
Scans Slack for API tokens, credentials, passwords, and more using YARA rules
yara yara-rules slack python security infosec
Language:Python 37