Links to malware-related YARA rules
☆15Sep 29, 2022Updated 4 years ago
Alternatives and similar repositories for yara-rules
Users that are interested in yara-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 2 months ago
- Yara matching in ElasticSearch.☆10Jun 12, 2018Updated 8 years ago
- ☆20Oct 23, 2020Updated 6 years ago
- Operational AI with Docker☆19May 29, 2026Updated 5 months ago
- Collection of generic YARA rules☆16Mar 18, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Jun 11, 2020Updated 6 years ago
- Cybersecurity Architects Handbook, Second Edition; published by Packt☆11Jun 29, 2026Updated 4 months ago
- ☆15Jun 5, 2019Updated 7 years ago
- TG 2016 hacking compo repo☆10Mar 31, 2016Updated 10 years ago
- JPCERT/CC public YARA rules repository☆112Mar 9, 2026Updated 7 months ago
- Epimitheus is a tool that uses graphical database Neo4j for Windows Events visualization.☆19Mar 13, 2022Updated 4 years ago
- ☆14Jun 26, 2020Updated 6 years ago
- enable libemu run pe file and add some good modify☆14Feb 4, 2019Updated 7 years ago
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Oct 18, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆14Jan 16, 2019Updated 7 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆17Jan 6, 2021Updated 5 years ago
- ☆16Mar 22, 2023Updated 3 years ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated last year
- Rules Shared by the Community from 100 Days of YARA 2023 -☆19Apr 10, 2023Updated 3 years ago
- ☆13Oct 21, 2022Updated 4 years ago
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Mar 5, 2024Updated 2 years ago
- VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.☆16Feb 13, 2024Updated 2 years ago
- python program to detect Portable_Executable files as either malicious or legitimate by trying out 5 different classification algorithms …☆11Feb 15, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cheat Sheets, Metodologies etc.☆19Apr 12, 2019Updated 7 years ago
- A highly available AWS deployment of the Threat Intelligence platform, OpenCTI using Terraform. Native AWS resources are used where feasi…☆39Apr 23, 2023Updated 3 years ago
- Unpacking and decryption tools for the Emotet malware☆44Dec 5, 2021Updated 4 years ago
- ida python scripts☆23Jul 23, 2018Updated 8 years ago
- SystemInspector is a script to pull a majority of the security-relevant files and settings from a system.☆18May 22, 2018Updated 8 years ago
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- ☆17Aug 25, 2017Updated 9 years ago
- A lightweight HTTP Server that exploits XSS victim's session automatically☆11Mar 12, 2014Updated 12 years ago
- ☆24Dec 15, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Power-Forensics is the Best Friend for Incident Responders to perform IR and collect evidences for Linux based host☆12Jun 2, 2023Updated 3 years ago
- Security scanner using YARA☆16Dec 6, 2025Updated 10 months ago
- List of Awesome Vertex Synapse Resources☆30Aug 6, 2024Updated 2 years ago
- Muteces (mutexes/mutants) used by various malware families☆25Nov 11, 2024Updated last year
- Config files for my GitHub profile.☆14May 7, 2023Updated 3 years ago
- Penetration Testing Methodology - short notes☆11May 30, 2015Updated 11 years ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆44Oct 1, 2026Updated 3 weeks ago