yara-signatures

There are 1 repository under yara-signatures topic.

InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
yara-rules yara-signatures yara malware-rules malware-analysis malware-research malware-detection yara-scanner yara-manager threat-hunting awesome awesome-yara awesome-list ioc
3975
reversinglabs-yara-rules
reversinglabs / reversinglabs-yara-rules
ReversingLabs YARA Rules
indicators-of-compromise malware-detection ransomware-detection ransomware-prevention reverse-engineering yara yara-rules yara-signatures
Language:YARA 809
roadwy / DefenderYara
Extracted Yara rules from Windows Defender mpavbase and mpasbase
antivirus defender dfir ioc malware-analysis threat-intelligence yara yara-rules yara-signatures
Language:YARA 388
InQuest / yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
threat-hunting yara yara-rules yara-signatures
Language:Python 384
bartblaze / Yara-rules
Collection of private Yara rules.
malware-detection ransomware-detection threat-hunting threat-intelligence yara yara-rules yara-signatures
Language:YARA 348
ThreatHunting-Keywords-yara-rules
mthcht / ThreatHunting-Keywords-yara-rules
yara detection rules for hunting with the threathunting-keywords project
awesome-list blueteam detection-engineering dfir forensics-tools hacktools hunting incident-response offensive-security threat-hunting threat-intelligence yara-forensics yara-rules yara-scanner yara-signatures
Language:YARA 147
InQuest / ThreatKB
Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
malware-research yara yara-manager yara-rules yara-signatures
Language:JavaScript 102
bartblaze / FARA
Repository that contains a set of purposefully erroneous Yara rules.
yara yara-rules yara-signatures
Language:YARA 50
deadbits / yara-rules
Collection of YARA signatures from individual research
yara yara-rules yara-signatures malware-analysis malware-research malware-detection malware-protection
Language:YARA 44
thewhiteninja / yarasploit
YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.
yara yara-rules yara-signatures metasploit shellcode python linux windows api
Language:YARA 44
tbalz2319 / RapidRepoPull
The goal of this program is to quickly pull and install repos from its list
python3 python security-tools security-automation pentesting scanner-web active-directory yara-signatures bash
Language:Python 40
ail-project / ail-yara-rules
A set of YARA rules for the AIL framework to detect leak or information disclosure
ail-yara-rules ail-framework information-disclosure yara-rules yara yara-signatures
Language:YARA 38
Yara-Repo
Fadavvi / Yara-Repo
A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/
yara yara-rules yara-signatures yara-forensics blueteam blueteaming threat-hunting threat-intelligence threatintel
Language:Shell 27
nccgroup / yaml2yara
Generate bulk YARA rules from YAML input
yara yara-signatures yaml
Language:HTML 22
cod3nym / detection-rules
Collection of my own detection rules
yara yara-rules yara-signatures
Language:YARA 17
CodeXTF2 / cobaltstrike-sleepmask-yara
Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-mask-kit-iocs
cobalt-strike cobaltstrike malware yara yara-rules yara-signatures
Language:YARA 13
horsicq / YARA-sort
Yara sort
yara yara-signatures yara-parser
Language:YARA 13
CIRCL / factual-rules
Factual rules are YARA rules to find legitimate software on raw disk acquisition.
dfir dfir-automation yara-rules yara-forensics yara-signatures
Language:YARA 12
pressidium / pressidium-yara-rules
Welcome to the Pressidium® Yara Rules repository. This section contains a carefully curated collection of Yara rules specifically designed to detect and prevent WordPress or PHP malware and viruses, ensuring a safer online environment.
malware-analysis malware-detection yara yara-rules yara-signatures
Language:YARA 12
AbishekPonmudi / PlanqX_EDR-Endpoint-Detection-and-Response
PlanqX EDR is an open-source, advanced Endpoint Detection and Response (EDR) solution for Windows, offering real-time system and network security. Features include API hooking, ELAM, ETW integration, AMSI, kernel-mode and APC callbacks, and baseline detection to provide comprehensive threat defense across boot-time and runtime.
hashes heuristic-algorithm malware-analysis network-analysis python security-tools threat-intelligence windows windows-exploit-suggester yara-signatures
Language:C 10
AzzOnFire / yarka
IDA plugin for YARA signature creation
ida ida-plugin ida-pro idapython yara yara-rules yara-signatures
Language:Python 10
paulveillard / cybersecurity-YARA
An ongoing collection of awesome tools and frameworks, best security software practices, libraries, learning tutorials, frameworks, academic and practical resources about YARA in cybersecurity
yara yara-scanner yara-signatures yara-manager yara-forensics
9
albertzsigovits / malware-yara
YARA rules for malware detection
malware malware-analysis malware-detection malware-protection malware-research malware-scanner malwareanalysis yara yara-forensics yara-rules yara-ruleset yara-signatures malware-yara
Language:YARA 7
SadFud / YARA.Rules
YARA rules for malware detection
apt malware malware-detection yara yara-rules yara-signatures
7
h4rdee / a-re-windows
windows apps analysis toolkit
malware-analysis malware-analyzer malware-detection reverse-engineering windows yara yara-scanner yara-signatures
Language:YARA 6
buzzer-re / Yara-Rules
Signatures for any cool analysis I may do
malware-research yara-signatures
Language:YARA 4
Mohamed-Adil-Cyber / Static_YaraRule_Maker
This is a gui script that takes a pe file and creates a yara file to detect it
malware-analysis reverse-engineering yara-rules yara-signatures
Language:Python 4
strfx / clava
clava 🔍: Generate Code-Based Yara Rules using Machine Learning.
yara yara-signatures machine-learning dfir incident-response malware-analysis
Language:Python 4
cybersecurity-dev / CyberThreatDefenseCenter-Yara-Rules
Cyber Threat Defense Center | Yara Rules
malware-detection yara yara-rules yara-scanner yara-signatures
Language:Python 1
gilmansharov / yara_rules
My yara rules repository
yara yara-signatures yara-rules malware-detection malware-analysis threat-hunting
1
izm1chael / viper-web-docker
Binary analysis and management framework
malware-analysis dockerfile docker-image malware-research binary-analysis yara-signatures yara
Language:Shell 1
ManuelBerrueta / YARA-rules
Yara rules
dfir incident-response incident-response-tooling infosec infosectools yara yara-rules yara-signatures
Language:YARA 1
mohabgabber / yet-another-cheat-sheet
This repository teaches you how to write and understand yara rules for malware analysis
malware malware-analysis yara yara-rules yara-signatures
Language:YARA 1
sathishshan / S_Yara-ruleset
S_yara-ruleset is based on Web Malwares (Open Source)
webmalware web malware signatures rules yara yara-rules yara-signatures yara-scanner
1
fywalsh / signature-generation-iot-malware-detection
Decision Tree-Based Signature Generation Framework for IoT Malware Detection
decision-tree-classifier decision-trees machine-learning malware-analysis malware-detection malware-research yara-signatures
Language:Python 0

yara-signatures

InQuest / awesome-yara

reversinglabs / reversinglabs-yara-rules

roadwy / DefenderYara

InQuest / yara-rules

bartblaze / Yara-rules

mthcht / ThreatHunting-Keywords-yara-rules

InQuest / ThreatKB

bartblaze / FARA

deadbits / yara-rules

thewhiteninja / yarasploit

tbalz2319 / RapidRepoPull

ail-project / ail-yara-rules

Fadavvi / Yara-Repo

nccgroup / yaml2yara

cod3nym / detection-rules

CodeXTF2 / cobaltstrike-sleepmask-yara

horsicq / YARA-sort

CIRCL / factual-rules

pressidium / pressidium-yara-rules

AbishekPonmudi / PlanqX_EDR-Endpoint-Detection-and-Response

AzzOnFire / yarka

paulveillard / cybersecurity-YARA

albertzsigovits / malware-yara

SadFud / YARA.Rules

h4rdee / a-re-windows

buzzer-re / Yara-Rules

Mohamed-Adil-Cyber / Static_YaraRule_Maker

strfx / clava

cybersecurity-dev / CyberThreatDefenseCenter-Yara-Rules

gilmansharov / yara_rules

izm1chael / viper-web-docker

ManuelBerrueta / YARA-rules

mohabgabber / yet-another-cheat-sheet

sathishshan / S_Yara-ruleset

fywalsh / signature-generation-iot-malware-detection