YARA rule analyzer to improve rule quality and performance
☆117Jun 4, 2026Updated 2 months ago
Alternatives and similar repositories for yaraQA
Users that are interested in yaraQA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Jun 18, 2026Updated 2 months ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆331Updated this week
- IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&…☆384Dec 9, 2022Updated 3 years ago
- A guide on how to write fast and memory friendly YARA rules☆174Feb 11, 2025Updated last year
- Random hunting ordiented yara rules☆96Mar 27, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A curated list of awesome YARA rules, tools, and people.☆33Oct 26, 2023Updated 2 years ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆265Oct 29, 2025Updated 9 months ago
- Threat Hunting & Incident Investigation with Osquery☆217Mar 30, 2022Updated 4 years ago
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆152Feb 1, 2026Updated 6 months ago
- Collection of private Yara rules.☆389Jan 28, 2026Updated 6 months ago
- ☆160Nov 26, 2023Updated 2 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆118Updated this week
- ReversingLabs YARA Rules☆937Nov 3, 2025Updated 9 months ago
- HASH (HTTP Agnostic Software Honeypot)☆142Aug 10, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆868Jan 20, 2022Updated 4 years ago
- ☆23Mar 12, 2025Updated last year
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 3 months ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,078Oct 5, 2023Updated 2 years ago
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated 11 months ago
- YARA signature and IOC database for my scanners and tools☆3,006Aug 3, 2026Updated 2 weeks ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆95Sep 7, 2023Updated 2 years ago
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Analyzing AD domains for security risks related to user accounts☆64Nov 11, 2022Updated 3 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Nov 19, 2023Updated 2 years ago
- Documentation and scripts to properly enable Windows event logs.☆718Oct 3, 2025Updated 10 months ago
- A golang CLI tool to download malware from a variety of sources.☆151Jul 3, 2025Updated last year
- Rules generated from our investigations.☆213Jul 8, 2026Updated last month
- ☆553Dec 4, 2023Updated 2 years ago
- IoC's, PCRE's, YARA's etc☆23Jul 13, 2026Updated last month
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆441May 21, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A python script developed to process Windows memory images based on triage type.☆267Nov 25, 2023Updated 2 years ago
- Collection of Jupyter Notebooks by @fr0gger_☆196May 11, 2026Updated 3 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆847Aug 5, 2026Updated last week
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 8 months ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆390May 11, 2022Updated 4 years ago
- Parse YARA rules and operate over them more easily.☆195Feb 6, 2025Updated last year
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Mar 14, 2023Updated 3 years ago