Alternatives and similar repositories for ursadb

Users that are interested in ursadb are comparing it to the libraries listed below

• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆78Updated 3 years ago
• Northern-Lights / yara-parser
  Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
  ☆85Updated 2 years ago
• plyara / plyara
  Parse YARA rules and operate over them more easily.
  ☆192Updated 8 months ago
• google / vxsig
  Automatically generate AV byte signatures from sets of similar binaries.
  ☆280Updated 10 months ago
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆87Updated 6 years ago
• avast / yaramod
  Parsing of YARA rules into AST and building new rulesets in C++.
  ☆128Updated last month
• hatching / sflock
  Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
  ☆83Updated last year
• AlienVault-OTX / yabin
  A Yara rule generator for finding related samples and hunting
  ☆159Updated 3 years ago
• mbrengel / yarix
  ☆60Updated 4 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆161Updated 3 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆216Updated 4 years ago
• arieljt / VTCodeSimilarity-YaraGen
  ☆97Updated 5 years ago
• MAECProject / malware-behaviors
  A taxonomy and dictionary of malware behaviors.
  ☆43Updated 6 years ago
• Cisco-Talos / BASS
  BASS - BASS Automated Signature Synthesizer
  ☆178Updated 7 years ago
• JPCERTCC / impfuzzy
  Fuzzy Hash calculated from import API of PE files
  ☆90Updated 3 years ago
• d00rt / emotet_network_protocol
  ☆84Updated 5 years ago
• conix-security / machoke
  ☆53Updated 7 years ago
• certtools / malware_name_mapping
  A mapping of used malware names to commonly known family names
  ☆62Updated 2 years ago
• CERT-Polska / karton-misp-pusher
  ☆16Updated last year
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆87Updated 8 years ago
• trendmicro / telfhash
  Symbol hash for ELF files
  ☆111Updated 3 years ago
• CERT-Polska / mquery
  YARA malware query accelerator (web frontend)
  ☆434Updated 2 weeks ago
• matonis / yara_tools
  Create an entire YARA rule via Python? Whhhhhhaatttt?
  ☆73Updated 6 years ago
• Te-k / pecli
  CLI tool to analyze PE files
  ☆88Updated last year
• danielplohmann / apiscout
  This project aims at simplifying Windows API import recovery on arbitrary memory dumps
  ☆257Updated 2 years ago
• mlodic / ursnif_beacon_decryptor
  Ursnif beacon decryptor
  ☆27Updated 2 years ago
• cmu-sei / BigGrep
  A scalable search index for binary files
  ☆116Updated 7 years ago
• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆37Updated 2 years ago
• sophos / yaraml_rules
  Security ML models encoded as Yara rules
  ☆212Updated 2 years ago
• CERT-Polska / mwdblib
  Client library for the mwdb service by CERT Polska.
  ☆41Updated 2 weeks ago