Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
☆75Jan 18, 2022Updated 4 years ago
Alternatives and similar repositories for factual-rules-generator
Users that are interested in factual-rules-generator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Factual rules are YARA rules to find legitimate software on raw disk acquisition.☆13Jan 18, 2022Updated 4 years ago
- ☆10Sep 13, 2022Updated 4 years ago
- ☆27Mar 2, 2022Updated 4 years ago
- Proactive Land Uncovering & Monitoring☆18Oct 24, 2026Updated last week
- ☆33Feb 26, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Klara docker compose☆11May 19, 2020Updated 6 years ago
- Liberating dem proprietary APT implants☆20Dec 17, 2019Updated 6 years ago
- A Python script that gathers all valid IP addresses from all text files from a directory, and checks them against Whois database, TOR rel…☆29Jun 27, 2022Updated 4 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆24Jan 31, 2024Updated 2 years ago
- Malware similarity platform with modularity in mind.☆81Jul 18, 2021Updated 5 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆37Feb 2, 2022Updated 4 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- YARI is an interactive debugger for YARA Language.☆91Sep 10, 2025Updated last year
- Small web frontend for using openAI's GPT-3.5 and GPT-4's API☆59Aug 3, 2026Updated 2 months ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆142Nov 19, 2023Updated 2 years ago
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- Practical Information Sharing between Law Enforcement and CSIRT communities using MISP☆37Sep 18, 2023Updated 3 years ago
- Simple PowerShell script to enable process scanning with Yara.☆101Oct 4, 2022Updated 4 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆41Jan 20, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Security ML models encoded as Yara rules☆217Jul 6, 2023Updated 3 years ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week
- ☆88Feb 11, 2022Updated 4 years ago
- Automatic generation of YARA rules from sample files.☆28Sep 12, 2026Updated last month
- Golang implementation of PyMISP-feedgenerator☆17Jul 31, 2022Updated 4 years ago
- A python script developed to process Windows memory images based on triage type.☆268Nov 25, 2023Updated 2 years ago
- Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results☆287Updated this week
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- Proof-of-concept automated baremetal malware analysis framework.☆14Sep 24, 2015Updated 11 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Import AbuseCH IOC Feeds into MISP☆12Feb 17, 2021Updated 5 years ago
- Tool for automatic list generation of known TOR and VPN exit nodes☆30Dec 21, 2023Updated 2 years ago
- ☆23May 19, 2019Updated 7 years ago
- Powershell module for VMWare vSphere forensics☆189Nov 8, 2024Updated last year
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- Vagrant Files to create a Virtualbox VM for Malware Analysis☆13Jun 1, 2021Updated 5 years ago