Alternatives and similar repositories for Coronavirus-Phishing-Yara-Rules:

Users that are interested in Coronavirus-Phishing-Yara-Rules are comparing it to the libraries listed below

• deependresearch / hoard
  Historical Observations of Actionable Reputation Data
  ☆13Updated 6 years ago
• cmatthewbrooks / pyiocutils
  A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).
  ☆17Updated 6 years ago
• DissectMalware / PySameSame
  This is a python version of samesame repo to generate homograph strings
  ☆23Updated 6 years ago
• WeaverHeavy / Threat-Intelligence-Tradecraft
  ☆27Updated 7 years ago
• PwCUK-CTO / rtfsig
  A tool to help malware analysts signature unique parts of RTF documents
  ☆29Updated last month
• sfakiana / FIRST-CTI-2019
  References for FIRST CTI 2019 Symposium presentation
  ☆23Updated 5 years ago
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 4 years ago
• ninoseki / iocingestor
  An extendable tool to extract and aggregate IoCs from threat feeds
  ☆33Updated last year
• DFIRnotes / rules
  Some rules, scripts of some use to us
  ☆9Updated 4 months ago
• aaronst / talks
  Presentation materials for talks I've given.
  ☆20Updated 5 years ago
• cloudtracer / text2cpe
  Sorta reverse implementation of ShoVAT - Also includes NMAP banner regex results
  ☆17Updated 6 years ago
• malwageddon / iris-h
  Placeholder for IRIS-H Digital Forensics Tool
  ☆13Updated 6 years ago
• egaus / malicious_url_analysis
  ☆18Updated 6 years ago
• DissectMalware / base64_substring
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆40Updated 6 years ago
• Neo23x0 / panopticon
  A YARA Rule Performance Measurement Tool
  ☆58Updated last year
• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆28Updated 7 years ago
• JimmyAstle / Atomic-Parser
  Python parser for Red Canary's Atomic Red Team Yamls
  ☆27Updated 6 years ago
• eset / volatility-browserhooks
  Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
  ☆40Updated 6 years ago
• kevthehermit / yaraMail
  Yara Scanner For IMAP Feeds and saved Streams
  ☆28Updated 5 years ago
• CERT-Polska / training-materials
  ☆50Updated 6 years ago
• caschnee / misp-use-cases
  ☆14Updated 6 years ago
• jaegeral / osint_to_timesketch
  Virustotal Data to Timesketch
  ☆17Updated 6 years ago
• PwCUK-CTO / OperationCloudHopper
  Indicators of compromise relating to our report on APT10's targeting of global MSPs
  ☆10Updated 7 years ago
• csirtgadgets / verbose-robot
  The Fastest way to consume Threat Intel
  ☆25Updated 2 years ago
• 3c7 / infrastructure-tracking-schema
  ☆24Updated 2 years ago
• bonifield / volatilityGrapher
  Force-Directed Graph Generator for Volatility Ouputs
  ☆26Updated 6 years ago
• ThreatResponse / threatresponse_web
  Web based analysis platform for use with the AWS_IR command line tool.
  ☆17Updated 8 years ago
• StamusNetworks / surimisp
  Check IOC provided by a MISP instance on Suricata events
  ☆17Updated 5 years ago
• avuko / kathe
  A GUI/REST interface to find similarities in large sets (think: binaries). Based on ssdeep.
  ☆19Updated 2 years ago
• jeFF0Falltrades / IoCs
  A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo
  ☆30Updated 4 years ago