YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
☆118Sep 10, 2026Updated 2 weeks ago
Alternatives and similar repositories for CCCS-Yara
Users that are interested in CCCS-Yara are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)☆73Updated this week
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated last year
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- Assemblyline 4 Malware detonation service (Cuckoo)☆16Feb 12, 2024Updated 2 years ago
- Python client for Assemblyline 3 and 4 / Client python pour AssemblyLine 3 and 4☆23Aug 27, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Parse YARA rules and operate over them more easily.☆195Feb 6, 2025Updated last year
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Python Library for ConfigExtractor☆16Jul 30, 2026Updated last month
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆352Jul 17, 2026Updated 2 months ago
- YARA malware query accelerator (web frontend)☆443Feb 3, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)☆21Updated this week
- AssemblyLine 4: File triage and malware analysis☆541Updated this week
- Malware similarity platform with modularity in mind.☆80Jul 18, 2021Updated 5 years ago
- ReversingLabs YARA Rules☆945Nov 3, 2025Updated 10 months ago
- CAPE Auto-Hardened Installer☆28Jan 28, 2026Updated 7 months ago
- YARA rule analyzer to improve rule quality and performance☆117Jun 4, 2026Updated 3 months ago
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago
- A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-system…☆28Aug 26, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Automatically generate AV byte signatures from sets of similar binaries.☆288May 4, 2026Updated 4 months ago
- Docker compose Assemblyline 4 deployment (appliance and development)☆17Updated this week
- A framework for orchestrating forensic collection, processing and data export☆356Updated this week
- A tool for studying JavaScript malware.☆15Updated this week
- Malware repository component for samples & static configuration with REST API interface.☆404Updated this week
- A Modular MWDB Utility to Collect Fresh Malware Samples☆33May 17, 2021Updated 5 years ago
- Universal Malware Sample Encryption☆13Jan 5, 2024Updated 2 years ago
- Base service class from Assemblyline 4☆16Updated this week
- ☆64Apr 1, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆111Apr 20, 2021Updated 5 years ago
- Export MISP attributes in Yara☆12Sep 15, 2017Updated 9 years ago
- Web interface and APIs for Assemblyline 4☆22Updated this week
- NSRL BloomFilter, Mandiant BloomFilter, Hyperloglog Malware Data Structure☆15Mar 14, 2014Updated 12 years ago
- A mapping of used malware names to commonly known family names☆65Feb 21, 2023Updated 3 years ago
- Use this library to automatically extract PE files compressed with aplib from a binary blob.☆34May 21, 2019Updated 7 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆150Sep 22, 2023Updated 3 years ago