Alternatives and similar repositories for YARA

Users that are interested in YARA are comparing it to the libraries listed below

• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆25Updated 9 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆16Updated 4 months ago
• montysecurity / InfraSpyder
  Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.
  ☆27Updated 2 years ago
• RustyNoob-619 / 100-Days-of-YARA-2024
  ☆19Updated last year
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆36Updated 2 months ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆35Updated 3 months ago
• FarghlyMal / Config-Extractors
  ☆27Updated 5 months ago
• matthw / malware_analysis
  ☆18Updated last year
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated 8 months ago
• eric-conrad / c2-talk
  ☆37Updated last year
• StrangerealIntel / Shadow-Pulse
  information about ransomware groups (Ransomware Analysis Notes)
  ☆37Updated last year
• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆33Updated this week
• airbus-seclab / nbutools
  Tools for offensive security of NetBackup infrastructures
  ☆40Updated last year
• ACE-Responder / rpcfirewall-extended-telemetry
  ☆14Updated last year
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated 11 months ago
• jaredcatkinson / MalwareMorphology
  ☆80Updated 5 months ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• Hagrid29 / CVE-2024-2432-PaloAlto-GlobalProtect-EoP
  ☆59Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆77Updated last year
• airbus-cert / minusone
  Powershell Linter
  ☆50Updated 2 weeks ago
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated last year
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 7 months ago
• moval0x1 / NoDelete
  NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.
  ☆47Updated 4 months ago
• MazX0p / CobaltSentry
  ☆23Updated 2 months ago
• c2links / NoWhere2Hide
  C2 Active Scanner
  ☆59Updated 10 months ago
• mhaskar / DNSKeyGen
  A tool to exchange decryption keys for command and control (C2) beacons and implants through DNS records.
  ☆39Updated 2 years ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆47Updated 4 months ago
• errbody / DPRK-Research
  ☆36Updated 2 months ago
• aleemladha / SANS-Workshop-Lab
  SANS Workshop: Active Directory Privilege Escalation with Empire!
  ☆29Updated last month