Alternatives and similar repositories for macos-ttps-yara

Users that are interested in macos-ttps-yara are comparing it to the libraries listed below

• 100DaysofYARA / 2025
  Rules shared by the community from 100 Days of YARA 2025
  ☆37Updated 9 months ago
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆117Updated last year
• bartblaze / FARA
  Repository that contains a set of purposefully erroneous Yara rules.
  ☆60Updated 3 months ago
• mnrkbys / ma2tl
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆95Updated 2 years ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year
• elastic / SWAT
  ☆166Updated last month
• pstirparo / machofile
  machofile is a module to parse Mach-O binary files
  ☆89Updated 3 months ago
• referefref / aiocrioc
  An LLM and OCR based Indicator of Compromise Extraction Tool
  ☆37Updated 11 months ago
• runreveal / sigmalite
  ☆51Updated 2 months ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆78Updated 2 years ago
• phretor / infosec-opml
  My very personal and opinionatedly organized infosec/cybersec sources in one OPML file
  ☆58Updated 2 years ago
• threatcat-ch / malware-analysis-pipeline
  Lightweight Python-Based Malware Analysis Pipeline
  ☆36Updated 2 months ago
• jshlbrd / detection-engineering-pocket-guide
  pocket guide for core detection engineering concepts
  ☆30Updated 2 years ago
• dwmetz / MalChela
  A YARA & Malware Analysis Toolkit written in Rust.
  ☆56Updated last month
• n0jam / gcp-ctf-workshop
  ☆41Updated 11 months ago
• AppOmni-Labs / event-maturity-matrix
  The Event Maturity Matrix (EMM) is a comprehensive framework that provides clarity regarding the capabilities and nuances of SaaS audit l…
  ☆30Updated 5 months ago
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆65Updated 3 years ago
• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 4 years ago
• silascutler / awesome-docker-malware-analysis
  Repository of tools and resources for analyzing Docker containers
  ☆71Updated 2 years ago
• c2links / NoWhere2Hide
  C2 Active Scanner
  ☆60Updated last year
• malpedia / malpedia-flossed
  FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
  ☆62Updated 5 months ago
• mnrkbys / norimaci
  Norimaci is a simple and lightweight malware analysis sandbox for macOS
  ☆70Updated 5 years ago
• korniko98 / pivot-atlas
  ☆99Updated 2 weeks ago
• fboldewin / YARA_Detection_Engineering
  Detection Engineering with YARA
  ☆87Updated last year
• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆28Updated last year
• DataDog / HASH
  HASH (HTTP Agnostic Software Honeypot)
  ☆141Updated last year
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆110Updated 3 years ago
• Yamato-Security / suzaku
  Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
  ☆155Updated 3 weeks ago
• markkcc / crxaminer
  Examine Chrome extensions for security issues
  ☆87Updated this week
• google / facade
  ☆132Updated 3 months ago