Alternatives and similar repositories for go-yara:

Users that are interested in go-yara are comparing it to the libraries listed below

• mitre / gocat
  Simplified go-cat agent for caldera
  ☆10Updated last year
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆61Updated last year
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 6 years ago
• Velocidex / oleparse
  Golang parser for OLE files
  ☆31Updated last week
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆31Updated 4 years ago
• EgeBalci / MapPE
  PE file mapping and manipulation package.
  ☆36Updated 2 years ago
• repnz / rpcmon
  RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
  ☆24Updated 4 years ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• EgeBalci / meterpreter
  Basic multi platform meterpreter loader module.
  ☆15Updated 4 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆83Updated 2 years ago
• malice-plugins / windows-defender
  Malice Windows Defender AntiVirus Plugin
  ☆38Updated 2 years ago
• Velocidex / go-pe
  A Portable Executable parser for Golang
  ☆47Updated 2 months ago
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆21Updated 3 months ago
• synacktiv / AMSI-Bypass
  Lists of AMSI triggers (VBA, JScript / VBScript)
  ☆33Updated 5 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• golang-devops / go-psexec
  The plan is to have a replacement for psexec
  ☆31Updated 6 years ago
• audibleblink / bothan
  Is this IP a C2 server?
  ☆28Updated 4 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆45Updated 3 weeks ago
• DamonMohammadbagher / ETWNetMonv3
  ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…
  ☆39Updated last year
• vulnwarex / bin2sc
  Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF
  ☆71Updated 4 years ago
• Truneski / WindowsKernelProgramming-Exercises
  ☆49Updated 4 years ago
• g0mxxm / shellcode_extractor_for_maldoc
  The code in this repository which function is to extract the shellcode from the maldoc.
  ☆10Updated last year
• jheise / yarascanner
  Golang based web service to scan files with yara rules
  ☆27Updated 7 years ago
• mjwhitta / win
  Windows API/constants, identity, and WinHTTP/WinINet for Go.
  ☆18Updated last month
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆24Updated 4 years ago
• stavinski / winhook
  Go library to allow native inline hooking in windows at runtime
  ☆13Updated last year
• JPCERTCC / QuasarRAT-Analysis
  QuasarRAT analysis tools and research report
  ☆27Updated last year
• botherder / go-autoruns
  Collect autorun records from running system
  ☆61Updated 3 years ago
• xpn / RpcEnum
  An command-line RPC method enumerator, born out of RPCView's awesomeness
  ☆103Updated 5 years ago
• FuzzySecurity / IBM-RedCON-2020
  IBM RedCON 2020 - Throwing an AquaWrench into the Kernel
  ☆44Updated 4 years ago