Yet Another Memory Analyzer for malware detection
☆210Apr 8, 2025Updated last year
Alternatives and similar repositories for YAMA
Users that are interested in YAMA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Elastic Security detection content for Endpoint☆1,508Updated this week
- JPCERT/CC public YARA rules repository☆112Mar 9, 2026Updated 7 months ago
- ☆230Sep 8, 2022Updated 4 years ago
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆68Feb 3, 2022Updated 4 years ago
- Active C&C Detector☆156Oct 5, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CLI tools for forensic investigation of Windows artifacts☆356Jul 21, 2025Updated last year
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆744Oct 21, 2026Updated last week
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,704Oct 14, 2026Updated 2 weeks ago
- Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…☆254Nov 18, 2024Updated last year
- A Binary Genetic Traits Lexer Framework☆606Jul 1, 2026Updated 3 months ago
- YARA signature and IOC database for my scanners and tools☆3,059Updated this week
- Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious d…☆41Aug 31, 2023Updated 3 years ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- A guide on how to write fast and memory friendly YARA rules☆175Feb 11, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Signatures and IoCs from public Volexity blog posts.☆376Oct 13, 2026Updated 2 weeks ago
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆743Aug 31, 2026Updated 2 months ago
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,427Jun 6, 2026Updated 4 months ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,999Updated this week
- Dynamic unpacker based on PE-sieve☆844Apr 14, 2026Updated 6 months ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆84Jun 28, 2023Updated 3 years ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆21Jul 1, 2023Updated 3 years ago
- EDR Lab for Experimentation Purposes☆1,579Jun 10, 2026Updated 4 months ago
- A golang CLI tool to download malware from a variety of sources.☆149Jul 3, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆13Jan 10, 2024Updated 2 years ago
- Extracted Yara rules from Windows Defender mpavbase and mpasbase☆540May 14, 2026Updated 5 months ago
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,427Updated this week
- Enhance your malware detection with WAF + YARA (WAFARAY)☆108Sep 29, 2022Updated 4 years ago
- Repository of tools and resources for analyzing Docker containers☆73Nov 20, 2023Updated 2 years ago
- A suite of tools to disrupt campaigns using the Sliver C2 framework.☆287Aug 5, 2023Updated 3 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- Documentation and scripts to properly enable Windows event logs.☆724Oct 3, 2025Updated last year
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆151Sep 21, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antiv…☆568Mar 24, 2026Updated 7 months ago
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,290Updated this week
- Cobalt Strike Beacon configuration extractor and parser.☆165Oct 30, 2025Updated last year
- APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the …☆1,431Sep 20, 2026Updated last month
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,134Sep 22, 2026Updated last month
- A dynamic unpacking tool☆154Sep 17, 2023Updated 3 years ago
- Symbol hash for ELF files☆117Feb 9, 2022Updated 4 years ago