yara-scanner

There are 4 repositories under yara-scanner topic.

InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
awesome awesome-list awesome-yara ioc malware-analysis malware-detection malware-research malware-rules threat-hunting yara yara-manager yara-rules yara-scanner yara-signatures
3975
deepfence / YaraHunter
🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍
devsecops devsecops-best-practices devsecops-pipeline ioc malware threat-hunting yara yara-scanner ci-cd hacktoberfest
Language:Go 1327
deadbits / vigil-llm
⚡ Vigil ⚡ Detect prompt injections, jailbreaks, and other potentially risky Large Language Model (LLM) inputs
llm-security prompt-injection adversarial-attacks adversarial-machine-learning large-language-models llmops yara-scanner security-tools
Language:Python 371
JPCERTCC / YAMA
Yet Another Memory Analyzer for malware detection
malware-detection memory-scanning anti-malware yara yara-scanner
Language:C++ 180
spyre-project / spyre
simple YARA-based IOC scanner
yara ioc security incident-response hacktoberfest windows linux macos macosx golang go yara-scanner scanner
Language:Go 168
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 147
michelcrypt4d4mus / yaralyzer
Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.
malware malware-analysis malware-detection reverse-engineering visualization yara yara-forensics yara-scanner blueteam dfir hacking-tool netsec netsec-tools yara-format yara-integrated yara-rules
Language:Python 137
Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
security threat-hunting antivirus scanner query-language csharp forensics-level-scanning forensics mft threat-monitor forensic-analysis forensics-investigations yara yara-scanner yara-rules
Language:C# 82
kweatherman / yara4ida
Unofficial YARA IDA Pro plugin, along with an unparalleled crypto/hash/compression rule set based on Luigi Auriemma's signsrch signatures.
cryptography ida-plugin reverse-engineering yara-rules yara-scanner
Language:YARA 75
fkie-cad / yapscan
Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
golang memory security yara yara-scanner
Language:Go 61
t4d / PhishingKit-Yara-Search
Yara scan Phishing Kit's Zip archive(s)
yara yara-scanner yara-rules phishing phishing-detection phishing-kit phishing-sites
Language:Python 57
iomoath / yara-scanner
YaraScanner is a file pattern-matching tool based on YARA rules.
yara-scanner yara-rules threat-hunting python3
Language:Python 56
vthib / boreal
Safe and performant YARA rules evaluator in Rust
pattern-matching rust yara yara-parser yara-scanner
Language:Rust 46
codeyourweb / irma
enpoint detection / live analysis & sandbox host / signatures quality test
endpoint-detection-response live-forensic threat-hunting yara-scanner
Language:Go 44
stellarbear / YaraSharp
C# wrapper around the Yara pattern matching library
yara yara-scanner wrapper-api wrapper-library yara-forensics wrapper libyara async-scanning net csharp
Language:C 42
0xN3utr0n / Kanis
Advanced threat detection solution for Linux.
antivirus container-security containers docker endpoint-security ids linux malware rootkit threat-detection yara yara-scanner
Language:Go 36
NumLocK15 / YaraStation
Yara station is a management portal for Neo23x0-Loki. The mission is to transform the standalone nature of the Loki scanner into a centralized management solution that facilitates result investigation and easier scanning capabilities.
yara-rules yara-scanner loki
Language:JavaScript 36
abhinavbom / clara
Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets
malware-analyzer malware-analysis s3-bucket s3-storage clamav yara yara-scanner malware-detection
Language:Python 31
nogoodconfig / pyarascanner
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
yara yara-scanner incident-response dfir python
Language:Python 26
pracsec / YaraTools
Over 100K open-source YARA signatures evaluated against over 280K files to give insights into the performance of each YARA rule.
forensics-tools yara yara-rules yara-scanner
Language:PowerShell 23
cloudina / hawk
Multi Cloud Antivirus Scanning API using YARA and CLAMAV for AWS S3, Azure Blob Storage and GCP Cloud Storage
antivirus yara yara-scanner clamav-scanning clamav-antivirus api-rest rest-api security-tools security aws cloud cloudsecurity s3scanner infosec azure azure-blob-storage gcp gcp-cloud-storage virus-scanner virus-scanning
Language:Go 22
rpgeeganage / audit-node-modules-with-yara
Audit Node Module folder with YARA rules to identify possible malicious packages hiding in node_moudles
malware-analysis static-analysis yara-rules yara-scanner yara-forensics nodejs node-js node-module nodesecurity node-security node-security-program
Language:YARA 20
seanthegeek / yaramail
A Python package and command line utility for scanning emails with YARA rules
email information-security infosec malware phishing security security-tools yara yara-scanner
Language:Python 20
Krypteria / Yaralyze
Yaralyze is an malware detection tool for Android that relies on two types of static analysis, Yara rule analysis and hashes analysis.
android-application antimalware java malware-detection python static-analysis yara-rules yara-scanner
Language:Java 18
Humoud / apksneeze-lab
Analyze Android APK files from a browser.
analysis android-reverse-engineering docker docker-compose flask-application yara-scanner
Language:HTML 14
deadbits / pe-static
Static file analysis for PE files
malware-analysis pe-analyzer malware-research malware-analyzer yara yara-scanner
Language:Python 13
dmknght / rkcheck
A malware scanner with Yara and ClamAV binding
antivirus clamav-antivirus yara-scanner
Language:Nim 12
paulveillard / cybersecurity-YARA
An ongoing collection of awesome tools and frameworks, best security software practices, libraries, learning tutorials, frameworks, academic and practical resources about YARA in cybersecurity
yara yara-scanner yara-signatures yara-manager yara-forensics
9
paranoya
c0m4r / paranoya
Simple IOC and YARA scanner for Linux®
yara yara-scanner malware-detector python security security-tool paranoya
Language:Python 7
dyussekeyev / thamara
THAMARA - Threat Hunting with AMSI and YARA
amsi cyber cyber-security cybersec cybersecurity information-security informationsecurity infosec infosectools malware malware-detection malware-protection threat-detection threat-hunting threathunting yara yara-forensics yara-scanner
Language:C 6
h4rdee / a-re-windows
windows apps analysis toolkit
malware-analysis malware-analyzer malware-detection reverse-engineering windows yara yara-scanner yara-signatures
Language:YARA 6
ChrisPritchard / slack-yara-scanner
A Slack App (AWS Lambda) for detecting and notifying on secret disclosure
aws-lambda slack-bot yara-scanner
Language:YARA 5
deadbits / yaraVT
Scan files with Yara and send rule matches to VirusTotal reports as comments
virustotal yara-scanner yara malware-analysis malware-research python
Language:Python 5
anyrun / anyrun-sdk
Simplify integration with ANY.RUN REST API services
aiohttp anyrun asyncio malware-analysis malware-detection python3 threat-intelligence iterator-protocol yara-rules yara-scanner
Language:Python 4
kittymagician / Aegis
Aegis - Flask web interface for scanning files with YARA
python3 flask-application yara yara-forensics yara-scanner
Language:HTML 4
darsh12 / ansible-yara
Ansible role - Build and install yara from source
yara ansible-role ansible-galaxy security linux yara-scanner ubuntu debian
3