Alternatives and similar repositories for YARA

Users that are interested in YARA are comparing it to the libraries listed below

• moval0x1 / NoDelete
  NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.
  ☆49Updated 2 months ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• montysecurity / InfraSpyder
  Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.
  ☆28Updated 2 years ago
• eric-conrad / c2-talk
  ☆37Updated last year
• FarghlyMal / Config-Extractors
  ☆27Updated last year
• StrangerealIntel / Shadow-Pulse
  information about ransomware groups (Ransomware Analysis Notes)
  ☆41Updated 2 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• closed-systems / strangerstrings
  A little tool to filter the stranger strings from a binary so you can analyze the good ones
  ☆52Updated 5 months ago
• t-tani / YAMA-dev
  Yet Another Memory Analyzer for malware detection
  ☆24Updated 2 years ago
• OSTEsayed / OSTE-MalStatWare
  MalStatWare automates malware analysis with Python. Extract key details like file size, type, hash, path, and digital signature. It analy…
  ☆30Updated last year
• Antonlovesdnb / DockerDetectionNotes
  Some of my rough notes for Docker threat detection
  ☆49Updated 2 years ago
• cyberark / ChattyCaty
  ☆33Updated 2 years ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆55Updated last year
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆53Updated 2 years ago
• bobby-tablez / TTP-Threat-Feeds
  Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨
  ☆64Updated this week
• matthw / malware_analysis
  ☆18Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆36Updated last year
• c2links / NoWhere2Hide
  C2 Active Scanner
  ☆59Updated last year
• xdanx / open-klara
  Open KLara Project
  ☆34Updated 2 months ago
• referefref / Rusty-Telephone
  Exfiltrate data over audio output from remote desktop sessions - Covert channel PoC
  ☆64Updated last year
• redrays-io / SAP-Threat-Modeling
  The SAP Threat Modeling Tool is an on-premises open-source web application designed to analyze and visualize connections between SAP syst…
  ☆51Updated 11 months ago
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated last year
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆59Updated 11 months ago
• net-dawg / SSHniffer
  ☆35Updated 2 years ago
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆24Updated 2 years ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆38Updated last year
• chipmanfu / Cyber-Range
  create a "simulated internet" cyber range environment
  ☆19Updated 2 weeks ago
• Sh1n0g1 / z9
  PowerShell Script Analyzer
  ☆70Updated 2 years ago
• RussianPanda95 / IDAPython
  IDA Python scripts
  ☆40Updated 10 months ago
• WellKnitTech / LockBitPanelDB
  Repo of the SQL database from the LockBit panel being hacked.
  ☆32Updated 9 months ago