DarkenCode / yara-rulesLinks
Repository of yara rules
☆49Updated 10 years ago
Alternatives and similar repositories for yara-rules
Users that are interested in yara-rules are comparing it to the libraries listed below
Sorting:
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆108Updated 4 years ago
- Malware Sinkhole List in various formats☆102Updated 3 years ago
- Personal compilation of APT malware from whitepaper releases, documents and own research☆265Updated 6 years ago
- Simple web shell scanner written in Golang.☆89Updated 6 years ago
- Cuckoo running in a nested hypervisor☆128Updated 5 years ago
- An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal☆203Updated 3 years ago
- Web shell scanner and analyzer.☆113Updated 2 years ago
- Toolset for research malware and Cobalt Strike beacons☆211Updated 8 months ago
- Minimal, consistent Python API for building integrations with malware sandboxes.☆141Updated last year
- This tool maps a file's behavior on MITRE ATT&CK matrix.☆59Updated 5 years ago
- Static based decoders for malware samples☆94Updated 5 years ago
- ☆53Updated 6 years ago
- Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation☆80Updated 2 months ago
- Endpoint detection & Malware analysis software☆229Updated 5 years ago
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- snake - a malware storage zoo☆217Updated 2 years ago
- Simulating Adversary Operations☆96Updated 7 years ago
- ATT&CK Evaluations website (DEPRECATED)☆61Updated 4 years ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆159Updated 8 months ago
- simple YARA-based IOC scanner☆170Updated last week
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 4 months ago
- Volatility Plugins☆64Updated 2 years ago
- Vthunting is a tiny script used to generate report about Virus Total hunting and send it by email, slack or telegram.☆167Updated 2 years ago
- The new name is DeTT&CT☆24Updated 6 years ago
- Automated Tactics Techniques & Procedures☆257Updated 2 years ago
- Tools to interact with APTnotes reporting/index.☆106Updated 5 years ago
- Explore Indicators of Compromise Automatically☆97Updated 5 years ago
- A tool for de-obfuscating PowerShell scripts☆71Updated 6 years ago
- Linux Incident Response☆90Updated 6 years ago
- This repository contains the website and the tools which are part of the joint research between Check Point Research and Intezer to map t…☆111Updated 6 years ago