Projects in Awesome Lists tagged with yara

https://github.com/VirusTotal/yara

The pattern matching swiss knife

yara

Last synced: 30 Jul 2024

https://virustotal.github.io/yara/

The pattern matching swiss knife

yara

Last synced: 03 Aug 2024

https://github.com/virustotal/yara

The pattern matching swiss knife

yara

Last synced: 29 Sep 2024

https://github.com/neo23x0/loki

Loki - Simple IOC and YARA Scanner

antivirus dfir hash ioc otx python scanner signature yara yara-rules

Last synced: 26 Sep 2024

https://github.com/Neo23x0/Loki

Loki - Simple IOC and YARA Scanner

antivirus dfir hash ioc otx python scanner signature yara yara-rules

Last synced: 01 Aug 2024

https://github.com/Neo23x0/signature-base

YARA signature and IOC database for my scanners and tools

anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules

Last synced: 01 Aug 2024

https://github.com/neo23x0/signature-base

YARA signature and IOC database for my scanners and tools

anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules

Last synced: 30 Sep 2024

https://github.com/horsicq/DIE-engine

DIE engine

binary-analysis disassembler elf entropy hacktoberfest hacktoberfest22 program-analysis reverse-engineering signature unpacker yara

Last synced: 01 Aug 2024

https://github.com/rednaga/apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

android android-protect-apps android-protection antivirus appshielding machine-learning malware-analysis malware-detection malware-research packers rasp yara yara-forensics

Last synced: 30 Sep 2024

https://github.com/rednaga/APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

android android-protect-apps android-protection antivirus appshielding machine-learning malware-analysis malware-detection malware-research packers rasp yara yara-forensics

Last synced: 04 Aug 2024

https://github.com/eset/malware-ioc

Indicators of Compromises (IOC) of our various investigations

ioc malware misp yara

Last synced: 01 Aug 2024

https://github.com/jvoisin/php-malware-finder

Detect potentially malicious PHP files

antivirus malware php webshell yara

Last synced: 26 Sep 2024

https://github.com/neo23x0/yargen

yarGen is a generator for YARA rules

malware malware-analysis malware-research malwareanalysis python yara

Last synced: 26 Sep 2024

https://github.com/Neo23x0/yarGen

yarGen is a generator for YARA rules

malware malware-analysis malware-research malwareanalysis python yara

Last synced: 02 Aug 2024

https://github.com/airbnb/binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

aws lambda malware-detection security serverless terraform yara

Last synced: 26 Sep 2024

https://github.com/curated-intel/Ukraine-Cyber-Operations

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.

cti iocs malware osint threat-hunting threat-intelligence ukraine yara

Last synced: 06 Aug 2024

https://github.com/target/strelka

Real-time, container-based file scanning at enterprise scale

cfc detection golang python3 security target-cfc yara

Last synced: 01 Aug 2024

https://github.com/inquest/threatingestor

Extract and aggregate threat intelligence.

dfir fraud-detection indicators-of-compromise intelligence-gathering ioc malware-research misp osint security-tools soar threat-analysis threat-feeds threat-hunting threat-intelligence threat-intelligence-platform threat-sharing threatintel yara

Last synced: 01 Aug 2024

https://github.com/InQuest/ThreatIngestor

Extract and aggregate threat intelligence.

dfir fraud-detection indicators-of-compromise intelligence-gathering ioc malware-research misp osint security-tools soar threat-analysis threat-feeds threat-hunting threat-intelligence threat-intelligence-platform threat-sharing threatintel yara

Last synced: 02 Aug 2024

https://github.com/reversinglabs/reversinglabs-yara-rules

ReversingLabs YARA Rules

indicators-of-compromise malware-detection ransomware-detection ransomware-prevention reverse-engineering yara yara-rules yara-signatures

Last synced: 02 Aug 2024

https://github.com/VirusTotal/yara-python

The Python interface for YARA

yara

Last synced: 03 Aug 2024

https://github.com/mitre/multiscanner

Modular file scanning/analysis framework

analysis-framework analytic-machines antivirus cuckoo linux malware malware-analysis malware-analyzer malware-research metadata python python-script scanning yara

Last synced: 01 Aug 2024

https://github.com/WerWolv/ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

constants data-structures encoding formats hacktoberfest imhex magic pattern-language patterns yara

Last synced: 01 Aug 2024

https://github.com/advanced-threat-research/Yara-Rules

Repository of YARA rules made by Trellix ATR Team

iocs threat-hunting threat-intelligence yara

Last synced: 02 Aug 2024

https://github.com/inquest/python-iocextract

Defanged Indicator of Compromise (IOC) Extractor.

base64 decoding defang dfir indicators-of-compromise ioc ioc-extractor library malware-research osint threat-intelligence threat-sharing threatintel yara

Last synced: 11 Aug 2024

https://github.com/InQuest/iocextract

Defanged Indicator of Compromise (IOC) Extractor.

base64 decoding defang dfir indicators-of-compromise ioc ioc-extractor library malware-research osint threat-intelligence threat-sharing threatintel yara

Last synced: 01 Aug 2024

https://github.com/wgpsec/whohk

whohk，linux下一款强大的应急响应工具在linux下的应急响应往往需要通过繁琐的命令行来查看各个点的情况，有的时候还需要做一些格式处理，这对于linux下命令不是很熟悉的人比较不友好。本工具将linux下应急响应中常用的一些操作给集合了起来，并处理成了较为友好的格式，只需要通过一个参数就能代替繁琐复杂的命令来实现对各个点的检查。

python yara

Last synced: 04 Aug 2024

https://github.com/CERT-Polska/mquery

YARA malware query accelerator (web frontend)

database malware security-automation security-tools yara

Last synced: 02 Aug 2024

https://github.com/PUNCH-Cyber/stoq

An open source framework for enterprise level automated analysis.

automation-framework framework malware-analysis malware-analyzer malware-detection malware-research security-automation yara

Last synced: 02 Aug 2024

https://github.com/V1D1AN/S1EM

This project is a SIEM with SIRP and Threat Intel, all in one.

arkime cortex docker elasticsearch filebeat kibana logstash malware misp mwdb n8n opencti sigma suricata thehive velociraptor yara zeek zircolite

Last synced: 02 Aug 2024

https://github.com/supportintelligence/icewater

16,432 Free Yara rules created by

cluster dna malware-analysis threat yara

Last synced: 01 Aug 2024

https://github.com/SupportIntelligence/Icewater

16,432 Free Yara rules created by

cluster dna malware-analysis threat yara

Last synced: 02 Aug 2024

https://github.com/inquest/yara-rules

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

threat-hunting yara yara-rules yara-signatures

Last synced: 03 Aug 2024

https://github.com/InQuest/yara-rules

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

threat-hunting yara yara-rules yara-signatures

Last synced: 02 Aug 2024

https://github.com/hillu/go-yara

Go bindings for YARA

cgo go golang hacktoberfest yara

Last synced: 30 Jul 2024

https://github.com/hillu/Go-yara

Go bindings for YARA

cgo go golang hacktoberfest yara

Last synced: 30 Jul 2024

https://github.com/bartblaze/Yara-rules

Collection of private Yara rules.

malware-detection ransomware-detection threat-hunting threat-intelligence yara yara-rules yara-signatures

Last synced: 02 Aug 2024

https://github.com/volexity/threat-intel

Signatures and IoCs from public Volexity blog posts.

snort-rules suricata-rules threat-intelligence yara yara-rules

Last synced: 01 Aug 2024

https://github.com/BayshoreNetworks/yextend

Yara integrated software to handle archive file data.

yara yara-integrated

Last synced: 02 Aug 2024

https://github.com/EmersonElectricCo/fsf

File Scanning Framework

file-analysis file-analyzer network-defense security-tools yara

Last synced: 02 Aug 2024

https://github.com/hyuunnn/hyara

Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)

binaryninja binaryninja-plugin cutter cutter-plugin ghidra ghidra-extension ghidra-plugin ida ida-plugin ida-pro idapro idapython idapython-plugin yara yara-rules

Last synced: 03 Aug 2024

https://github.com/hyuunnn/Hyara

Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)

binaryninja binaryninja-plugin cutter cutter-plugin ghidra ghidra-extension ghidra-plugin ida ida-plugin ida-pro idapro idapython idapython-plugin yara yara-rules

Last synced: 02 Aug 2024

https://github.com/evilsocket/sauron

A minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules.

malware scanner signature signatures virus yara

Last synced: 17 Aug 2024

https://github.com/PUNCH-Cyber/YaraGuardian

Django web interface for managing Yara rules

manager metrics rules yara yara-manager yara-metrics yara-rules

Last synced: 02 Aug 2024

https://github.com/t4d/PhishingKit-Yara-Rules

Repository of Yara rules dedicated to Phishing Kits Zip files

phishing phishing-detection phishing-kit yara

Last synced: 02 Aug 2024

https://github.com/ditekshen/detection

Detection in the form of Yara, Snort and ClamAV signatures.

clamav detection ioc rules signatures snort yara

Last synced: 03 Aug 2024

https://github.com/plyara/plyara

Parse YARA rules and operate over them more easily.

lexer parser ply python python3 sly yara yara-parser yara-rules

Last synced: 02 Aug 2024

https://github.com/spyre-project/spyre

simple YARA-based IOC scanner

go golang hacktoberfest incident-response ioc linux macos macosx scanner security windows yara yara-scanner

Last synced: 01 Aug 2024

https://github.com/Xumeiquer/yara-forensics

Set of Yara rules for finding files using magics headers

dump-files forensics magic-headers yara yara-forensics yara-rules

Last synced: 02 Aug 2024

https://github.com/Yara-Rules/yara-endpoint

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

anti-malware endpoint incident-response yara

Last synced: 02 Aug 2024

https://github.com/InQuest/ThreatKB

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

malware-research yara yara-manager yara-rules yara-signatures

Last synced: 01 Aug 2024

https://github.com/CybercentreCanada/CCCS-Yara

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA

assemblyline yara yara-format

Last synced: 02 Aug 2024

https://github.com/ninoseki/uzen

Website crawler with YARA detection

headless-chrome yara

Last synced: 01 Oct 2024

https://github.com/Northern-Lights/yara-parser

Tools for parsing rulesets using the exact grammar as YARA. Written in Go.

detection go golang grammar json lexer ruleset security security-tools signatures yara yara-parser yara-ruleset

Last synced: 02 Aug 2024

https://github.com/AdamWhiteHat/Judge-Jury-and-Executable

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.

antivirus csharp forensic-analysis forensics forensics-investigations forensics-level-scanning mft query-language scanner security threat-hunting threat-monitor yara yara-rules yara-scanner

Last synced: 04 Aug 2024

https://github.com/Neo23x0/Loki2

LOKI2 - Simple IOC and YARA Scanner

dfir incident-response iocs scanner yara

Last synced: 17 Aug 2024

https://github.com/CIRCL/factual-rules-generator

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

computer-forensics dfir yara yara-rules

Last synced: 02 Aug 2024

https://github.com/Hugal31/yara-rust

Rust bindings for VirusTotal/Yara

pattern-matching rust rust-bindings yara

Last synced: 01 Aug 2024

https://github.com/avast/yls

YARA Language Server

avast lsp-server python3 vscode yara

Last synced: 12 Aug 2024

https://github.com/3c7/yaramanager

Simple yara rule manager

cli sqlite yara

Last synced: 02 Aug 2024

https://github.com/mole-ids/mole

Yara powered NIDS with high speed packet capture powered by PF_RING

go golang ids libpcap nids pf-ring yara

Last synced: 02 Aug 2024

https://github.com/infosec-intern/vscode-yara

VSCode extension for the YARA pattern matching language

vscode vscode-extension vscode-language vscode-snippets yara

Last synced: 02 Aug 2024

https://github.com/threatlabz/iocs

This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports

iocs malware-research malware-samples yara yara-rules

Last synced: 01 Aug 2024

https://github.com/RamadhanAmizudin/python-icap-yara

An ICAP Server with yara scanner for URL and content.

icap icap-server malware-analysis python squid-proxy yara

Last synced: 02 Aug 2024

https://github.com/lprat/static_file_analysis

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

analysis clamav defensive-security docker malware-analysis security security-tools sigma static-analysis yara yara-rules

Last synced: 02 Aug 2024

https://github.com/imp0rtp3/Yobi

Yara Based Detection Engine for web browsers

add-on antivirus dfir firefox javascript malware scanner yara

Last synced: 02 Aug 2024

https://github.com/DissectMalware/base64_substring

Generate a Yara rule to find base64-encoded files containg a specific keyword

base64 python3 search-in-base64 yara yara-rule-generator

Last synced: 02 Aug 2024

https://github.com/deadbits/yara-rules

Collection of YARA signatures from individual research

malware-analysis malware-detection malware-protection malware-research yara yara-rules yara-signatures

Last synced: 02 Aug 2024

https://github.com/bandrel/ocyara

Performs OCR on image files and scans them for matches to YARA rules

ocr optical-character-recognition python python-3 tesseract tesseract-ocr-api yara yara-rules

Last synced: 28 Sep 2024

https://github.com/CIRCL/yara-validator

Validates yara rules and tries to repair the broken ones.

dfir yara yara-rules

Last synced: 02 Aug 2024

https://github.com/bandrel/OCyara

Performs OCR on image files and scans them for matches to YARA rules

ocr optical-character-recognition python python-3 tesseract tesseract-ocr-api yara yara-rules

Last synced: 02 Aug 2024

https://github.com/0xN3utr0n/Kanis

Advanced threat detection solution for Linux.

antivirus container-security containers docker endpoint-security ids linux malware rootkit threat-detection yara yara-scanner

Last synced: 01 Aug 2024

https://github.com/stellarbear/YaraSharp

C# wrapper around the Yara pattern matching library

async-scanning csharp libyara net wrapper wrapper-api wrapper-library yara yara-forensics yara-scanner

Last synced: 02 Aug 2024

https://github.com/ysrc/shelldaddy

跨平台 webshell 静态扫描器

tlsh webshell yara

Last synced: 03 Aug 2024

https://github.com/abhinavbom/clara

Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets

clamav malware-analysis malware-analyzer malware-detection s3-bucket s3-storage yara yara-scanner

Last synced: 02 Aug 2024

https://github.com/YARA-Silly-Silly/yarasilly2

Automatic generation of YARA rules from sample files.

hacktoberfest jinja2 python3 yara yara-forensics yara-rules

Last synced: 02 Aug 2024

https://github.com/bnbdr/ida-yara-processor

IDA Processor for Compiled YARA Rules

disassembler ida idapython-plugin yara yara-rules

Last synced: 02 Aug 2024

https://github.com/fr0gger/Yara-Unprotect

This repository regroups the Yara Rules for the Unprotect Project

malware unprotectproject yara

Last synced: 02 Aug 2024

https://github.com/CERT-Bund/yara-exporter

Exporting MISP event attributes to yara rules usable with Thor apt scanner

analysis apt cert csirt incident-response misp scanner thor yara

Last synced: 04 Aug 2024

https://github.com/wrayjustin/yaids

YAIDS - Yara-Based IDS - Yara as an Intrusion Detection System / Yet Another Intrusion Detection System - An Intrusion Detection System (IDS) utilizing Yara and multi-threading

intrusion-detection libpcap libyara multi-threading network-analysis pcap yara

Last synced: 02 Aug 2024

https://github.com/nyx0/YaraSyntax

YARA package for Sublime Text

sublime-text syntax-highlighting yara

Last synced: 02 Aug 2024

https://github.com/nccgroup/yaml2yara

Generate bulk YARA rules from YAML input

yaml yara yara-signatures

Last synced: 02 Aug 2024

https://github.com/cloudina/hawk

Multi Cloud Antivirus Scanning API using YARA and CLAMAV for AWS S3, Azure Blob Storage and GCP Cloud Storage

antivirus api-rest aws azure azure-blob-storage clamav-antivirus clamav-scanning cloud cloudsecurity gcp gcp-cloud-storage infosec rest-api s3scanner security security-tools virus-scanner virus-scanning yara yara-scanner

Last synced: 02 Aug 2024

https://github.com/imp0rtp3/yara-rules

Yara rules written by me, for free use.

dfir malware-analysis threat-intelligence yara yara-rules

Last synced: 02 Aug 2024

https://github.com/CyberDefenses/CDI_yara

A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.

yara yara-rules

Last synced: 02 Aug 2024

https://github.com/sk4la/plast

Modular command-line threat hunting tool & framework.

apt digital-forensics framework incident-response ioc python python3 threat-hunting yara

Last synced: 02 Aug 2024

https://github.com/elastic/siglearn

Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"

machinelearning malware-detection security-tools yara yara-rules

Last synced: 26 Sep 2024

https://github.com/horsicq/YARA-sort

Yara sort

yara yara-parser yara-signatures

Last synced: 02 Aug 2024

https://github.com/hashlookup/a-ray-grass

a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly discard known files "pour séparer le grain de l'ivraie"

bloom-filter filter yara yara-module

Last synced: 02 Aug 2024

https://github.com/phantom0004/morpheus_ioc_scanner

Welcome to Morpheus, your gateway to advanced IOC detection. This tool harnesses the power of expertly crafted Yara rules to meticulously scan and identify Indicators of Compromise across a variety of files. Step into a new era of cybersecurity defense, where precision meets power.

analysis blue-team-tool blue-teaming-tools cyber-analysis-tools cybersecurity ioc python3 scanner yara yara-rules