Alternatives and similar repositories for ursadb

Users that are interested in ursadb are comparing it to the libraries listed below

• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆76Updated 3 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆212Updated 3 years ago
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆86Updated 6 years ago
• avast / yaramod
  Parsing of YARA rules into AST and building new rulesets in C++.
  ☆124Updated last month
• google / vxsig
  Automatically generate AV byte signatures from sets of similar binaries.
  ☆273Updated 6 months ago
• AlienVault-OTX / yabin
  A Yara rule generator for finding related samples and hunting
  ☆158Updated 2 years ago
• plyara / plyara
  Parse YARA rules and operate over them more easily.
  ☆191Updated 4 months ago
• Northern-Lights / yara-parser
  Tools for parsing rulesets using the exact grammar as YARA. Written in Go.
  ☆85Updated 2 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆161Updated 2 years ago
• hatching / sflock
  Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
  ☆83Updated last year
• MAECProject / malware-behaviors
  A taxonomy and dictionary of malware behaviors.
  ☆42Updated 5 years ago
• avast / yarang
  Alternative YARA scanning engine
  ☆70Updated 2 years ago
• intezer / yara-rules
  ☆127Updated 4 months ago
• certtools / malware_name_mapping
  A mapping of used malware names to commonly known family names
  ☆62Updated 2 years ago
• d00rt / emotet_network_protocol
  ☆83Updated 5 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆137Updated 4 years ago
• angelkillah / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆87Updated 8 years ago
• danielplohmann / apiscout
  This project aims at simplifying Windows API import recovery on arbitrary memory dumps
  ☆250Updated 2 years ago
• Cisco-Talos / BASS
  BASS - BASS Automated Signature Synthesizer
  ☆175Updated 6 years ago
• arieljt / VTCodeSimilarity-YaraGen
  ☆98Updated 4 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆75Updated 10 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago
• kirk-sayre-work / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆96Updated last week
• MITRECND / malchive
  Various capabilities for static malware analysis.
  ☆78Updated 9 months ago
• CERT-Polska / mquery
  YARA malware query accelerator (web frontend)
  ☆431Updated 3 months ago
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆86Updated 7 years ago
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• grierforensics / officedissector
  Static analysis tools for Microsoft Office Open XML files and documents
  ☆70Updated 7 years ago
• pinkflawd / r2graphity
  Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators
  ☆86Updated 8 years ago
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆162Updated 6 months ago