YARA rule analyzer to improve rule quality and performance
☆117Jun 4, 2026Updated 3 months ago
Alternatives and similar repositories for yaraQA
Users that are interested in yaraQA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Jun 18, 2026Updated 2 months ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆334Updated this week
- IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&…☆385Dec 9, 2022Updated 3 years ago
- A guide on how to write fast and memory friendly YARA rules☆174Feb 11, 2025Updated last year
- Random hunting ordiented yara rules☆97Mar 27, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A curated list of awesome YARA rules, tools, and people.☆33Oct 26, 2023Updated 2 years ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆265Oct 29, 2025Updated 10 months ago
- Threat Hunting & Incident Investigation with Osquery☆217Mar 30, 2022Updated 4 years ago
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆153Feb 1, 2026Updated 7 months ago
- Collection of private Yara rules.☆390Jan 28, 2026Updated 7 months ago
- ☆160Nov 26, 2023Updated 2 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆118Updated this week
- ReversingLabs YARA Rules☆937Nov 3, 2025Updated 10 months ago
- HASH (HTTP Agnostic Software Honeypot)☆142Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆870Jan 20, 2022Updated 4 years ago
- ☆23Mar 12, 2025Updated last year
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 3 months ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,077Oct 5, 2023Updated 2 years ago
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated 11 months ago
- YARA signature and IOC database for my scanners and tools☆3,020Updated this week
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆95Sep 7, 2023Updated 3 years ago
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Analyzing AD domains for security risks related to user accounts☆64Nov 11, 2022Updated 3 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Nov 19, 2023Updated 2 years ago
- Documentation and scripts to properly enable Windows event logs.☆718Oct 3, 2025Updated 11 months ago
- A golang CLI tool to download malware from a variety of sources.☆151Jul 3, 2025Updated last year
- Rules generated from our investigations.☆214Jul 8, 2026Updated last month
- ☆553Dec 4, 2023Updated 2 years ago
- IoC's, PCRE's, YARA's etc☆23Jul 13, 2026Updated last month
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆444May 21, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A nim port of C5pider's Ekko project.☆18Oct 1, 2022Updated 3 years ago
- A python script developed to process Windows memory images based on triage type.☆267Nov 25, 2023Updated 2 years ago
- Collection of Jupyter Notebooks by @fr0gger_☆196May 11, 2026Updated 3 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆850Aug 24, 2026Updated last week
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 9 months ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆390May 11, 2022Updated 4 years ago
- Parse YARA rules and operate over them more easily.☆195Feb 6, 2025Updated last year