yara-rules

There are 4 repositories under yara-rules topic.

InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
yara-rules yara-signatures yara malware-rules malware-analysis malware-research malware-detection yara-scanner yara-manager threat-hunting awesome awesome-yara awesome-list ioc
3278
Neo23x0 / Loki
Loki - Simple IOC and YARA Scanner
python yara signature scanner ioc otx antivirus hash yara-rules dfir
Language:Python 3251
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
signature yara-rules ioc scanner yara anti-virus hash threat-hunting threat-intelligence dfir
Language:YARA 2347
sroberts / awesome-iocs
A collection of sources of indicators of compromise.
awesome awesome-list ioc signature yara-rules
Language:Shell 746
reversinglabs-yara-rules
reversinglabs / reversinglabs-yara-rules
ReversingLabs YARA Rules
reverse-engineering yara-rules yara-signatures ransomware-detection ransomware-prevention malware-detection indicators-of-compromise yara
Language:YARA 699
KasperskyLab / klara
Kaspersky's GReAT KLara
yara-rules klara threat-intelligence threat-hunting
Language:PHP 679
InQuest / yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
yara yara-rules threat-hunting yara-signatures
Language:Python 355
bartblaze / Yara-rules
Collection of private Yara rules.
yara-rules yara-signatures yara malware-detection ransomware-detection threat-hunting threat-intelligence
Language:YARA 302
volexity / threat-intel
Signatures and IoCs from public Volexity blog posts.
yara threat-intelligence yara-rules suricata-rules snort-rules
Language:Python 287
sapphirex00 / Threat-Hunting
Personal compilation of APT malware from whitepaper releases, documents and own research
threat-hunting threat-intelligence threat-sharing threat-modeling collection malware malware-analysis malware-research yara-rules malware-detection
251
hyuunnn / Hyara
Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
ida-plugin idapython-plugin idapython yara cutter cutter-plugin binaryninja binaryninja-plugin yara-rules ida idapro ida-pro ghidra ghidra-extension ghidra-plugin
Language:Python 215
PUNCH-Cyber / YaraGuardian
Django web interface for managing Yara rules
yara rules manager metrics yara-rules yara-manager yara-metrics
Language:Python 188
plyara / plyara
Parse YARA rules and operate over them more easily.
yara yara-rules parser yara-parser lexer ply python python3 sly
Language:Python 169
Xumeiquer / yara-forensics
Set of Yara rules for finding files using magics headers
forensics yara yara-rules dump-files magic-headers yara-forensics
Language:YARA 134
alt3kx / wafaray
Enhance your malware detection with WAF + YARA (WAFARAY)
blueteam blueteaming pentesting security-tools threat-intelligence threathunting waf yara yara-rules
Language:Shell 105
Hestat / lw-yara
Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
dfir lw-yara malware-detection signature yara-rules
Language:YARA 100
michelcrypt4d4mus / yaralyzer
Visually inspect and force decode YARA and regex matches found in both binary and text data. With Colors.
malware malware-analysis malware-detection reverse-engineering visualization yara yara-forensics yara-scanner blueteam dfir hacking-tool netsec netsec-tools yara-format yara-integrated yara-rules
Language:Python 99
roadwy / DefenderYara
Extracted Yara rules from Windows Defender mpavbase and mpasbase
defender yara-rules antivirus yara dfir ioc malware-analysis yara-signatures threat-intelligence
Language:YARA 95
sbousseaden / YaraHunts
Random hunting ordiented yara rules
threat-hunting yara-rules
Language:YARA 95
InQuest / ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
yara-rules yara yara-manager malware-research yara-signatures
Language:JavaScript 92
blackberry / threat-research-and-intelligence
BlackBerry Threat Research & Intelligence
artificial-intelligence iocs machine-learning research sigma-rules suricata-rules threatintelligence yara-rules
Language:Jupyter Notebook 88
Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
security threat-hunting antivirus scanner query-language csharp forensics-level-scanning forensics mft threat-monitor forensic-analysis forensics-investigations yara yara-scanner yara-rules
Language:C# 78
CIRCL / factual-rules-generator
Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
dfir yara yara-rules computer-forensics
Language:Python 72
RussianPanda95 / Yara-Rules
Repository of Yara Rules
malware-detection malware-research yara-rules
Language:YARA 72
threatlabz / iocs
This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
iocs malware-research malware-samples yara yara-rules
Language:YARA 60
kweatherman / yara4ida
Unofficial YARA IDA Pro plugin, along with an unparalleled crypto/hash/compression rule set based on Luigi Auriemma's signsrch signatures.
cryptography reverse-engineering ida-plugin yara-rules yara-scanner
Language:YARA 59
t4d / PhishingKit-Yara-Search
Yara scan Phishing Kit's Zip archive(s)
yara yara-scanner yara-rules phishing phishing-detection phishing-kit phishing-sites
Language:Python 52
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 51
lprat / static_file_analysis
Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules
analysis yara-rules clamav malware-analysis security-tools security static-analysis defensive-security sigma yara docker
Language:YARA 49
iomoath / yara-scanner
YaraScanner is a file pattern-matching tool based on YARA rules.
yara-scanner yara-rules threat-hunting python3
Language:Python 48
bartblaze / FARA
Repository that contains a set of purposefully erroneous Yara rules.
yara yara-rules yara-signatures
Language:YARA 46
thewhiteninja / yarasploit
YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.
yara yara-rules yara-signatures metasploit shellcode python linux windows api
Language:YARA 42
deadbits / yara-rules
Collection of YARA signatures from individual research
yara yara-rules yara-signatures malware-analysis malware-research malware-detection malware-protection
Language:YARA 41
bandrel / OCyara
Performs OCR on image files and scans them for matches to YARA rules
yara tesseract ocr optical-character-recognition python-3 python yara-rules tesseract-ocr-api
Language:Python 38
CIRCL / yara-validator
Validates yara rules and tries to repair the broken ones.
yara yara-rules dfir
Language:Python 38
ail-project / ail-yara-rules
A set of YARA rules for the AIL framework to detect leak or information disclosure
ail-yara-rules ail-framework information-disclosure yara-rules yara yara-signatures
Language:YARA 36