RussianPanda95 / Yara-Rules

Related projects: ⓘ

• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆175Updated last year
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆80Updated last year
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆108Updated last year
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆34Updated 7 months ago
• itaymigdal / malware-analysis-writeups
  Some of my Malware Analysis writeups.
  ☆40Updated last year
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆66Updated last year
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆104Updated 2 months ago
• jsecurity101 / JonMon
  ☆154Updated last month
• struppigel / hedgehog-tools
  ☆103Updated last month
• eric-conrad / c2-talk
  ☆34Updated 5 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆75Updated 5 months ago
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆138Updated this week
• MalGamy / YARA_Rules
  ☆63Updated last year
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆121Updated last month
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆164Updated last month
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆51Updated 2 weeks ago
• SafeBreach-Labs / aikido_wiper
  ☆63Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆68Updated 6 months ago
• airbus-cert / minusone
  Powershell Linter
  ☆46Updated 2 months ago
• daddycocoaman / dumpscan
  Finding secrets in kernel and user memory
  ☆112Updated last year
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆76Updated last year
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆104Updated last year
• jaredcatkinson / MalwareMorphology
  ☆74Updated 3 months ago
• StrangerealIntel / Shadow-Pulse
  information about ransomware groups (Ransomware Analysis Notes)
  ☆36Updated 8 months ago
• c3rb3ru5d3d53c / mwcfg
  A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
  ☆125Updated 9 months ago
• dodo-sec / Malware-Analysis
  ☆131Updated last year
• DissectMalware / yaradbg-frontend
  ☆36Updated 7 months ago
• Sh1n0g1 / z9
  PowerShell Script Analyzer
  ☆64Updated 10 months ago
• esThreatIntelligence / RussianPanda_tools
  ☆44Updated 2 weeks ago
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆190Updated last year