Alternatives and similar repositories for ursadb:

Users that are interested in ursadb are comparing it to the libraries listed below

• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆76Updated 3 years ago
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆86Updated 5 years ago
• Northern-Lights / yara-parser
  Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
  ☆83Updated 2 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆158Updated 2 years ago
• AlienVault-OTX / yabin
  A Yara rule generator for finding related samples and hunting
  ☆158Updated 2 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆205Updated 3 years ago
• avast / yaramod
  Parsing of YARA rules into AST and building new rulesets in C++.
  ☆122Updated last month
• MAECProject / malware-behaviors
  A taxonomy and dictionary of malware behaviors.
  ☆42Updated 5 years ago
• hatching / sflock
  Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
  ☆82Updated last year
• google / vxsig
  Automatically generate AV byte signatures from sets of similar binaries.
  ☆264Updated 3 months ago
• certtools / malware_name_mapping
  A mapping of used malware names to commonly known family names
  ☆62Updated 2 years ago
• plyara / plyara
  Parse YARA rules and operate over them more easily.
  ☆181Updated last month
• danielplohmann / apiscout
  This project aims at simplifying Windows API import recovery on arbitrary memory dumps
  ☆247Updated last year
• mbrengel / yarix
  ☆57Updated 3 years ago
• Te-k / pecli
  CLI tool to analyze PE files
  ☆87Updated 5 months ago
• arieljt / VTCodeSimilarity-YaraGen
  ☆97Updated 4 years ago
• trendmicro / telfhash
  Symbol hash for ELF files
  ☆108Updated 3 years ago
• d00rt / emotet_network_protocol
  ☆82Updated 5 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆75Updated 10 years ago
• CERT-Polska / karton-misp-pusher
  ☆16Updated 10 months ago
• CERT-Polska / mquery
  YARA malware query accelerator (web frontend)
  ☆421Updated last week
• tildedennis / malware
  ☆44Updated 6 years ago
• Cisco-Talos / BASS
  BASS - BASS Automated Signature Synthesizer
  ☆174Updated 6 years ago
• 0ver-fl0w / ISFB_Tools
  List of tools to assist in analyzing samples of ISFB/Gozi/Ursnif
  ☆15Updated 5 years ago
• pinkflawd / r2graphity
  Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
  ☆86Updated 7 years ago
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• tehsyntx / loffice
  Lazy Office Analyzer
  ☆119Updated 8 years ago
• intezer / yara-rules
  ☆125Updated last month
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆85Updated 7 years ago
• jjo-sec / pynetsim
  ☆17Updated 7 years ago