Alternatives and similar repositories for ursadb

Users that are interested in ursadb are comparing it to the libraries listed below

• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆160Updated 2 years ago
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆85Updated 6 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆210Updated 3 years ago
• hatching / sflock
  Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
  ☆82Updated last year
• google / vxsig
  Automatically generate AV byte signatures from sets of similar binaries.
  ☆273Updated 5 months ago
• AlienVault-OTX / yabin
  A Yara rule generator for finding related samples and hunting
  ☆158Updated 2 years ago
• Northern-Lights / yara-parser
  Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
  ☆84Updated 2 years ago
• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆76Updated 3 years ago
• avast / yarang
  Alternative YARA scanning engine
  ☆70Updated 2 years ago
• avast / yaramod
  Parsing of YARA rules into AST and building new rulesets in C++.
  ☆124Updated 2 weeks ago
• angelkillah / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆87Updated 8 years ago
• certtools / malware_name_mapping
  A mapping of used malware names to commonly known family names
  ☆62Updated 2 years ago
• PUNCH-Cyber / YaraGuardian
  Django web interface for managing Yara rules
  ☆192Updated 6 years ago
• CERT-Polska / mquery
  YARA malware query accelerator (web frontend)
  ☆428Updated 2 months ago
• pinkflawd / r2graphity
  Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
  ☆86Updated 7 years ago
• plyara / plyara
  Parse YARA rules and operate over them more easily.
  ☆189Updated 3 months ago
• CERT-Polska / karton-misp-pusher
  ☆16Updated last year
• danielplohmann / apiscout
  This project aims at simplifying Windows API import recovery on arbitrary memory dumps
  ☆249Updated 2 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆75Updated 10 years ago
• mbrengel / yarix
  ☆58Updated 4 years ago
• intezer / yara-rules
  ☆127Updated 4 months ago
• d00rt / emotet_network_protocol
  ☆82Updated 5 years ago
• d00rt / emotet_research
  ☆134Updated 6 years ago
• conix-security / machoke
  ☆51Updated 6 years ago
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆86Updated 7 years ago
• MAECProject / malware-behaviors
  A taxonomy and dictionary of malware behaviors.
  ☆42Updated 5 years ago
• endgameinc / Maxwell
  ☆75Updated 8 years ago
• Cisco-Talos / BASS
  BASS - BASS Automated Signature Synthesizer
  ☆175Updated 6 years ago
• Te-k / pecli
  CLI tool to analyze PE files
  ☆88Updated 8 months ago
• silence-is-best / c2db
  c2 traffic
  ☆188Updated 2 years ago