yara-rules

There are 9 repositories under yara-rules topic.

InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
awesome awesome-list awesome-yara ioc malware-analysis malware-detection malware-research malware-rules threat-hunting yara yara-manager yara-rules yara-scanner yara-signatures
4063
Neo23x0 / Loki
Loki - Simple IOC and YARA Scanner
python yara signature scanner ioc otx antivirus hash yara-rules dfir
Language:Python 3673
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
signature yara-rules ioc scanner yara anti-virus hash threat-hunting threat-intelligence dfir
Language:YARA 2781
sroberts / awesome-iocs
A collection of sources of indicators of compromise.
awesome awesome-list ioc signature yara-rules
Language:Shell 914
reversinglabs-yara-rules
reversinglabs / reversinglabs-yara-rules
ReversingLabs YARA Rules
indicators-of-compromise malware-detection ransomware-detection ransomware-prevention reverse-engineering yara yara-rules yara-signatures
Language:YARA 856
KasperskyLab / klara
Kaspersky's GReAT KLara
yara-rules klara threat-intelligence threat-hunting
Language:PHP 716
ThreatHunting-Keywords
mthcht / ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
awesome-list blueteam detection-engineering endpoint-security iocs offensive-scripts offensive-security redteam siem soc splunk threat-hunting threat-intelligence threathunting dfir incident-response forensic hacktools elk-stack yara-rules
Language:PowerShell 613
c3rb3ru5d3d53c / binlex
A Binary Genetic Traits Lexer Framework
binary-analysis binary-code binary-similarity binlex cybersecurity genetic-progamming ida-plugin malware-analysis malware-research reverse-engineering yara yara-rules
Language:Rust 516
roadwy / DefenderYara
Extracted Yara rules from Windows Defender mpavbase and mpasbase
defender yara-rules antivirus yara dfir ioc malware-analysis yara-signatures threat-intelligence
Language:YARA 470
InQuest / yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
threat-hunting yara yara-rules yara-signatures
Language:Python 385
bartblaze / Yara-rules
Collection of private Yara rules.
malware-detection ransomware-detection threat-hunting threat-intelligence yara yara-rules yara-signatures
Language:YARA 372
volexity / threat-intel
Signatures and IoCs from public Volexity blog posts.
snort-rules suricata-rules threat-intelligence yara yara-rules
Language:Python 359
michelcrypt4d4mus / pdfalyzer
Analyze PDFs with colors (and YARA)
malicious-pdf-files malware-analysis pdf pdf-documents pdf-format pdf-parser yara yara-rules yara-scanner
Language:YARA 335
sapphirex00 / Threat-Hunting
Personal compilation of APT malware from whitepaper releases, documents and own research
collection malware malware-analysis malware-detection malware-research threat-hunting threat-intelligence threat-modeling threat-sharing yara-rules
263
hyuunnn / Hyara
Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
binaryninja binaryninja-plugin cutter cutter-plugin ghidra ghidra-extension ghidra-plugin ida ida-plugin ida-pro idapro idapython idapython-plugin yara yara-rules
Language:Python 239
PUNCH-Cyber / YaraGuardian
Django web interface for managing Yara rules
yara rules manager metrics yara-rules yara-manager yara-metrics
Language:Python 195
plyara / plyara
Parse YARA rules and operate over them more easily.
yara yara-rules parser yara-parser lexer ply python python3 sly lex yacc yara-x
Language:Python 192
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 151
michelcrypt4d4mus / yaralyzer
Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.
malware malware-analysis malware-detection reverse-engineering visualization yara yara-forensics yara-scanner blueteam dfir hacking-tool netsec netsec-tools yara-format yara-integrated yara-rules
Language:Python 141
Xumeiquer / yara-forensics
Set of Yara rules for finding files using magics headers
forensics yara yara-rules dump-files magic-headers yara-forensics
Language:YARA 141
RussianPanda95 / Yara-Rules
Repository of Yara Rules
malware-detection malware-research yara-rules
Language:YARA 122
alt3kx / wafaray
Enhance your malware detection with WAF + YARA (WAFARAY)
blueteam blueteaming pentesting security-tools threat-intelligence threathunting waf yara yara-rules
Language:Shell 109
Hestat / lw-yara
Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
dfir lw-yara malware-detection signature yara-rules
Language:YARA 103
InQuest / ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
yara-rules yara yara-manager malware-research yara-signatures
Language:JavaScript 103
blackberry / threat-research-and-intelligence
BlackBerry Threat Research & Intelligence
artificial-intelligence iocs machine-learning research sigma-rules suricata-rules threatintelligence yara-rules
Language:Jupyter Notebook 99
sbousseaden / YaraHunts
Random hunting ordiented yara rules
threat-hunting yara-rules
Language:YARA 97
Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
security threat-hunting antivirus scanner query-language csharp forensics-level-scanning forensics mft threat-monitor forensic-analysis forensics-investigations yara yara-scanner yara-rules
Language:C# 82
kweatherman / yara4ida
Unofficial YARA IDA Pro plugin, along with an unparalleled crypto/hash/compression rule set based on Luigi Auriemma's signsrch signatures.
cryptography ida-plugin reverse-engineering yara-rules yara-scanner
Language:YARA 82
CIRCL / factual-rules-generator
Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
dfir yara yara-rules computer-forensics
Language:Python 76
ThreatLabz / iocs
This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
iocs malware-research malware-samples yara yara-rules
Language:YARA 73
t4d / PhishingKit-Yara-Search
Yara scan Phishing Kit's Zip archive(s)
phishing phishing-detection phishing-kit phishing-sites yara yara-rules yara-scanner
Language:Python 61
bartblaze / FARA
Repository that contains a set of purposefully erroneous Yara rules.
yara yara-rules yara-signatures
Language:YARA 59
iomoath / yara-scanner
YaraScanner is a file pattern-matching tool based on YARA rules.
python3 threat-hunting yara-rules yara-scanner
Language:Python 59
morpheus_IOC_scanner
phantom0004 / morpheus_IOC_scanner
Enter Morpheus, your advanced IOC detection tool. Powered by expert YARA rules and integrated with VirusTotal, it scans and identifies Indicators of Compromise with unmatched precision across diverse formats, redefining cybersecurity defense.
analysis blue-team-tool blue-teaming-tools cyber-analysis-tools cybersecurity ioc python3 scanner yara yara-rules
Language:Python 54
lprat / static_file_analysis
Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules
analysis yara-rules clamav malware-analysis security-tools security static-analysis defensive-security sigma yara docker
Language:YARA 50
thewhiteninja / yarasploit
YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.
api linux metasploit python shellcode windows yara yara-rules yara-signatures
Language:YARA 44

yara-rules

InQuest / awesome-yara

Neo23x0 / Loki

Neo23x0 / signature-base

sroberts / awesome-iocs

reversinglabs / reversinglabs-yara-rules

KasperskyLab / klara

mthcht / ThreatHunting-Keywords

c3rb3ru5d3d53c / binlex

roadwy / DefenderYara

InQuest / yara-rules

bartblaze / Yara-rules

volexity / threat-intel

michelcrypt4d4mus / pdfalyzer

sapphirex00 / Threat-Hunting

hyuunnn / Hyara

PUNCH-Cyber / YaraGuardian

plyara / plyara

mthcht / ThreatHunting-Keywords-yara-rules

michelcrypt4d4mus / yaralyzer

Xumeiquer / yara-forensics

RussianPanda95 / Yara-Rules

alt3kx / wafaray

Hestat / lw-yara

InQuest / ThreatKB

blackberry / threat-research-and-intelligence

sbousseaden / YaraHunts

AdamWhiteHat / Judge-Jury-and-Executable

kweatherman / yara4ida

CIRCL / factual-rules-generator

ThreatLabz / iocs

t4d / PhishingKit-Yara-Search

bartblaze / FARA

iomoath / yara-scanner

phantom0004 / morpheus_IOC_scanner

lprat / static_file_analysis

thewhiteninja / yarasploit