https://github.com/cybersecurity-dev/cyberthreatdefensecenter-yara-rules
Cyber Threat Defense Center | Yara Rules
https://github.com/cybersecurity-dev/cyberthreatdefensecenter-yara-rules
malware-detection yara yara-rules yara-scanner yara-signatures
Last synced: about 1 year ago
JSON representation
Cyber Threat Defense Center | Yara Rules
- Host: GitHub
- URL: https://github.com/cybersecurity-dev/cyberthreatdefensecenter-yara-rules
- Owner: cybersecurity-dev
- License: mit
- Created: 2025-01-14T14:59:42.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-01-16T13:31:24.000Z (over 1 year ago)
- Last Synced: 2025-03-11T13:48:07.231Z (over 1 year ago)
- Topics: malware-detection, yara, yara-rules, yara-scanner, yara-signatures
- Language: Python
- Homepage:
- Size: 7.81 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Cyber Threat Defense Center Yara Rules
Welcome to the official Cyber Threat Defense Center (**CTDC**) YARA rules repository! CTDC Threat Research provides this YARA rule repository for high-quality threat detection.
Developed and tested by our analysts, the repository is continuously updated with rules for new threats.Intended for threat hunters, incident responders, and security analysts.
# Prerequisites
To successfully run the entire YARA rule set, you must have:
* YARA version >= 4.5.0
* **PE** and **ELF** modules enabled
(or any other security solution compliant with the requirements).
# Deployment and Usage
To begin utilizing our YARA rules, simply clone this repository. You can then experiment with them on your datasets. These rules offer versatility and can be integrated into various security environments.
- **Standalone Usage**: The simplest method involves employing the standalone YARA executable. You can find it within the official YARA repository: [official YARA repository](https://github.com/VirusTotal/yara).
- **Security Integration**: These rules are compatible with a wide range of modern security solutions that offer YARA integration. This includes YARA-enabled sandboxes and other file analysis frameworks.
# License
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
# Acknowledgements
...