A tool to help malware analysts signature unique parts of RTF documents
☆29Jan 5, 2026Updated 7 months ago
Alternatives and similar repositories for rtfsig
Users that are interested in rtfsig are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python 3 library to build YARA rules.☆13Oct 24, 2021Updated 4 years ago
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- Indicators of compromise, YARA rules, and Python scripts to supplement the SANS CTI Summit 2021 talk: "xStart when you're ready".☆14Jul 12, 2021Updated 5 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Sep 26, 2017Updated 8 years ago
- command line tool to use the DNSDB Flexible Search API extensions.☆16Aug 5, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Generate YARA rules for OOXML documents.☆38Jun 1, 2023Updated 3 years ago
- Utility to scrape pastebin's incoming feed for known malware techniques☆20Feb 4, 2020Updated 6 years ago
- My collection of scripts for Ghidra (https://github.com/NationalSecurityAgency/ghidra)☆11Sep 13, 2020Updated 5 years ago
- Collection of my own detection rules☆20Jan 6, 2026Updated 7 months ago
- ☆98Oct 7, 2020Updated 5 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Jan 31, 2024Updated 2 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Jun 11, 2020Updated 6 years ago
- a collection of yara rules for binary analysis☆24Aug 24, 2017Updated 8 years ago
- YARA Language Server☆74Feb 3, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A Maltego transform for VirusTotal vHash☆32Oct 12, 2019Updated 6 years ago
- ☆12Jul 14, 2020Updated 6 years ago
- An add-on for Kodi to play random videos from a variety of lists.☆10May 9, 2023Updated 3 years ago
- A Simple CLI App to mark all EXCEL sheets visible (i.e. sets "Very Hidden" and "Hidden" to "Visible")☆11Apr 16, 2020Updated 6 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Sep 17, 2019Updated 6 years ago
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆74Jan 12, 2019Updated 7 years ago
- Command line tool for scanning streams within office documents plus xor db attack☆127Sep 23, 2023Updated 2 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆112Apr 20, 2021Updated 5 years ago
- ☆17Nov 12, 2017Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆25Aug 25, 2020Updated 5 years ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- C2 Active Scanner☆59Jun 19, 2024Updated 2 years ago
- Generation of STIX2 compliant entities for Maltego☆21Oct 4, 2023Updated 2 years ago
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago
- Automatic YARA rule generation for Malpedia☆168Sep 8, 2022Updated 3 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆93Jun 17, 2026Updated last month
- Provides a multi-platform Graphical User Interface for hashlookup☆12Jul 12, 2024Updated 2 years ago
- The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.☆12Jun 18, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Placeholder for IRIS-H Digital Forensics Tool☆16May 30, 2018Updated 8 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆19Oct 7, 2016Updated 9 years ago
- Scan outlook inbox with yara rules,APIs and IOCs☆14Aug 3, 2018Updated 8 years ago
- Awesome VirusTotal Intelligence Search Queries☆333May 16, 2023Updated 3 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- aggregated repo for all conferences and talks I am giving☆17Oct 30, 2021Updated 4 years ago
- c2 traffic☆193Feb 6, 2023Updated 3 years ago