Alternatives and similar repositories for YARA

Users that are interested in YARA are comparing it to the libraries listed below

• moval0x1 / NoDelete
  NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.
  ☆48Updated 9 months ago
• bobby-tablez / TTP-Threat-Feeds
  Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨
  ☆36Updated this week
• Antonlovesdnb / DockerDetectionNotes
  Some of my rough notes for Docker threat detection
  ☆47Updated 2 years ago
• closed-systems / strangerstrings
  A little tool to filter the stranger strings from a binary so you can analyze the good ones
  ☆46Updated 3 weeks ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• StrangerealIntel / Shadow-Pulse
  information about ransomware groups (Ransomware Analysis Notes)
  ☆39Updated last year
• eric-conrad / c2-talk
  ☆37Updated last year
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated last year
• c2links / NoWhere2Hide
  C2 Active Scanner
  ☆60Updated last year
• montysecurity / InfraSpyder
  Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.
  ☆28Updated 2 years ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• FarghlyMal / Config-Extractors
  ☆27Updated 10 months ago
• RustyNoob-619 / 100-Days-of-YARA-2024
  ☆19Updated last year
• matthw / malware_analysis
  ☆18Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆23Updated 9 months ago
• t-tani / YAMA-dev
  Yet Another Memory Analyzer for malware detection
  ☆24Updated 2 years ago
• cyberark / ChattyCaty
  ☆30Updated 2 years ago
• Sh1n0g1 / z9
  PowerShell Script Analyzer
  ☆70Updated last year
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆57Updated 7 months ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆54Updated 10 months ago
• jaredcatkinson / MalwareMorphology
  ☆82Updated 10 months ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆113Updated 5 months ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 7 months ago
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆150Updated last year
• Escape-Technologies / API-Threat-Matrix
  A comprehensive knowledge base for security professionals to keep track of and build defenses against API attack techniques.
  ☆43Updated last year
• fr0gger / proximity
  Proximity is a MCP security scanner powered with NOVA
  ☆45Updated last week
• SafeBreach-Labs / QuickShell
  A library and a set of tools for exploiting and communicating with Google's Quick Share devices.
  ☆47Updated 6 months ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆68Updated last year
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆132Updated 8 months ago