https://github.com/CERT-Bund/yara-exporter

Exporting MISP event attributes to yara rules usable with Thor apt scanner
https://github.com/CERT-Bund/yara-exporter

analysis apt cert csirt incident-response misp scanner thor yara

Last synced: 22 days ago
JSON representation

Exporting MISP event attributes to yara rules usable with Thor apt scanner

• Host: GitHub
• URL: https://github.com/CERT-Bund/yara-exporter
• Owner: CERT-Bund
• License: mit
• Archived: true
• Created: 2017-03-23T09:47:09.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2017-03-27T05:19:16.000Z (over 7 years ago)
• Last Synced: 2024-08-05T17:42:25.423Z (4 months ago)
• Topics: analysis, apt, cert, csirt, incident-response, misp, scanner, thor, yara
• Language: Python
• Size: 14.6 KB
• Stars: 22
• Watchers: 5
• Forks: 9
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - CERT-Bund/yara-exporter - Exporting MISP event attributes to yara rules usable with Thor apt scanner (Python)

README

        
# Yaraexporter

This little script is able to export misp attribute values into yara rules. Documentation can be found [here](https://yara-exporter.readthedocs.io)