https://github.com/rapid7/Rapid7-Labs

Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence, research and analytics.
https://github.com/rapid7/Rapid7-Labs

Last synced: 3 months ago
JSON representation

Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence, research and analytics.

• Host: GitHub
• URL: https://github.com/rapid7/Rapid7-Labs
• Owner: rapid7
• License: mit
• Created: 2023-11-29T08:35:40.000Z (12 months ago)
• Default Branch: main
• Last Pushed: 2024-05-22T22:32:14.000Z (6 months ago)
• Last Synced: 2024-05-22T23:34:14.294Z (6 months ago)
• Language: YARA
• Homepage:
• Size: 101 KB
• Stars: 18
• Watchers: 7
• Forks: 6
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.md

Awesome Lists containing this project

• awesome-yara - Rapid7-Labs

README

        
# Rapid7 Labs Repository

## Introduction

This repository contains a curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) shared by Rapid7 Labs. These resources are part of our ongoing efforts to enhance cybersecurity awareness and defense strategies.

## About Rapid7 Labs

[Rapid7 Labs](https://www.rapid7.com/blog/tag/research/) operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence, research and analytics. 

## Table of Contents

1. [Getting Started](#getting-started)

2. [Usage](#usage)

3. [Contribution Guidelines](#contribution-guidelines)

4. [License](#license)

## Getting Started

To get started with the Yara & Sigma rules in this repository, follow these steps:

1. **Clone the Repository:**

   ```bash

   git clone https://github.com/rapid7/Rapid7-Labs.git

   ```

2. **Explore IOC, Yara,and Sigma Rules:**

   Browse through the various IOCs, Yara,and Sigma rules available in the repository. Each rule is designed to identify specific malware characteristics.

## Usage

Currently, this repository offers:

- **Sigma Rules**: Detailed Sigma rules for threat detection. See [Sigma](./Sigma) folder.

- **Yara Rules**: Yara rules for identifying malware patterns. See [Yara](./Yara) folder.

- **Indicators of Compromise**: A comprehensive list of IOCs associated with various threats. See [IOCs](./IOCs) folder.

## Contribution Guidelines

We welcome contributions from community to enhance and expand the Yara rule set. To contribute:

1. Fork the repository.

2. Create a new branch for your changes.

3. Make your changes and ensure they align with the contribution guidelines.

4. Submit a pull request for review.

## License

This repository is licensed under the [MIT License](LICENSE.md). By contributing to this project, you agree to the terms and conditions outlined in the license.

---

Thank you for using the Rapid7 Labs Repository. If you have any questions or issues, feel free to open an [issue](https://github.com/rapid7/Rapid7-Labs/issues) or reach out to the repository maintainers. Happy hunting!