Alternatives and similar repositories for Signatures:

Users that are interested in Signatures are comparing it to the libraries listed below

• nccgroup / mimikatz-detector-busylight
  USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…
  ☆20Updated 2 years ago
• montysecurity / InfraSpyder
  Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.
  ☆27Updated last year
• elceef / yara-rulz
  Collection of generic YARA rules
  ☆15Updated 9 months ago
• bartblaze / DotNet-MetaData
  Identifies metadata of .NET binary files.
  ☆21Updated 11 months ago
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆55Updated last year
• FarghlyMal / Config-Extractors
  ☆25Updated 4 months ago
• embee-research / Icedid-file-decryptor
  Static Decryptor for IcedID Malware
  ☆18Updated 2 years ago
• Squiblydoo / MalAPIReader
  Reads and prints information from the website MalAPI.io
  ☆19Updated 2 years ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• OTRF / BHEU22-ADFS
  Writing Your Own Ticket to the Cloud Like APT: A Deep-dive to AD FS Attacks, Detections, and Mitigations
  ☆12Updated 2 years ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated 11 months ago
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆49Updated 2 years ago
• airbus-seclab / nbutools
  Tools for offensive security of NetBackup infrastructures
  ☆39Updated last year
• usualsuspect / yara_vt_mock
  Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing
  ☆21Updated last year
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆44Updated 2 years ago
• matthw / malware_analysis
  ☆18Updated last year
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated last year
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆42Updated last year
• DissectMalware / yaradbg-frontend
  ☆39Updated last year
• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆24Updated 7 months ago
• woanware / etw-event-dumper
  ☆33Updated 3 years ago
• TheEnergyStory / malware_analysis_tools
  Tools helpful for malware analysis
  ☆22Updated 7 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• Neo23x0 / yara-uuid-generator
  A tool that adds reproducible UUIDs to YARA rules
  ☆13Updated 11 months ago
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆25Updated 6 months ago
• shlyuz / teamserver
  ☆12Updated 2 years ago
• ail-project / ail-yara-rules
  A set of YARA rules for the AIL framework to detect leak or information disclosure
  ☆38Updated last month
• daddycocoaman / volplugins
  Repository of Volatility3 plugins
  ☆21Updated 2 years ago
• RussianPanda95 / IDAPython
  IDA Python scripts
  ☆30Updated last year