CERT-Polska / mquery
YARA malware query accelerator (web frontend)
☆418Updated this week
Alternatives and similar repositories for mquery:
Users that are interested in mquery are comparing it to the libraries listed below
- Malware repository component for samples & static configuration with REST API interface.☆334Updated this week
- IOC from articles, tweets for archives☆312Updated last year
- Volatility plugin for extracts configuration data of known malware☆482Updated last year
- YARA Rules I come across on the internet☆333Updated 9 months ago
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆305Updated 7 months ago
- Set of Yara rules for finding files using magics headers☆134Updated 4 years ago
- Distributed malware processing framework based on Python, Redis and S3.☆397Updated 2 months ago
- Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant☆236Updated last year
- Malduck is your ducky companion in malware analysis journeys☆323Updated 6 months ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆369Updated 2 years ago
- Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…☆136Updated 2 years ago
- Malware Configuration And Payload Extraction☆748Updated last month
- c2 traffic☆189Updated last year
- Automatic Yara Rule Generation☆331Updated 8 years ago
- Repository of YARA rules made by Trellix ATR Team☆574Updated last year
- 16,432 Free Yara rules created by☆382Updated 5 years ago
- Deception based detection techniques mapped to the MITRE’s ATT&CK framework☆288Updated 7 years ago
- For all these times you're asking yourself "what is this panel again?"☆253Updated last year
- Trigram database written in C++, suited for malware indexing☆125Updated 2 months ago
- ☆125Updated 3 years ago
- Django web interface for managing Yara rules☆190Updated 6 years ago
- ☆274Updated last year
- Generating YARA rules based on binary code☆205Updated 3 years ago
- Minimal, consistent Python API for building integrations with malware sandboxes.☆138Updated 11 months ago
- Collection of private Yara rules.☆338Updated 2 months ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆556Updated this week
- User guide of MISP☆263Updated 2 weeks ago
- Online hash checker for Virustotal and other services☆817Updated 8 months ago
- ☆150Updated 6 years ago
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆131Updated 2 years ago