3c7 / yaramanagerLinks
Simple yara rule manager
☆66Updated 2 years ago
Alternatives and similar repositories for yaramanager
Users that are interested in yaramanager are comparing it to the libraries listed below
Sorting:
- Random hunting ordiented yara rules☆97Updated 2 years ago
- Various capabilities for static malware analysis.☆78Updated 11 months ago
- Malware similarity platform with modularity in mind.☆78Updated 4 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 6 months ago
- A YARA Rule Performance Measurement Tool☆59Updated last year
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆45Updated 3 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 4 years ago
- Hunt malware with Volatility☆47Updated last month
- Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)☆21Updated last week
- Yara Based Detection Engine for web browsers☆49Updated 3 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆106Updated 3 months ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆75Updated last year
- Open source training materials for law-enforcement and organisations interested in DFIR.☆60Updated 2 months ago
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- ☆35Updated 10 months ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 6 years ago
- Hatching Triage public command-line utility and API library.☆71Updated last year
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆66Updated 2 years ago
- ☆77Updated 6 years ago
- Collection of YARA signatures from individual research☆44Updated last year
- A Splunk Technology Add-on to forward filtered ETW events.☆30Updated 4 years ago
- Recon Hunt Queries☆77Updated 4 years ago
- Repository with selected IOCs and YARA rules for threat hunting.☆35Updated 3 months ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆19Updated 4 years ago
- A tool to help malware analysts signature unique parts of RTF documents☆29Updated 7 months ago
- Threat Box Assessment Tool☆19Updated 4 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆65Updated 2 years ago
- Python library for threat intelligence☆87Updated 7 months ago
- Community modules for FAME☆65Updated last week
- pocket guide for core threat hunting concepts☆23Updated 5 years ago