Alternatives and similar repositories for go-yara

Users that are interested in go-yara are comparing it to the libraries listed below

• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆30Updated 5 years ago
• jheise / yarascanner
  Golang based web service to scan files with yara rules
  ☆26Updated 7 years ago
• Velocidex / go-pe
  A Portable Executable parser for Golang
  ☆47Updated 5 months ago
• Velocidex / oleparse
  Golang parser for OLE files
  ☆32Updated 2 months ago
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 6 years ago
• repnz / rpcmon
  RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
  ☆24Updated 5 years ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• golang-devops / go-psexec
  The plan is to have a replacement for psexec
  ☆31Updated 6 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆83Updated 2 years ago
• EgeBalci / MapPE
  PE file mapping and manipulation package.
  ☆36Updated 3 years ago
• g0mxxm / shellcode_extractor_for_maldoc
  The code in this repository which function is to extract the shellcode from the maldoc.
  ☆10Updated last year
• thewhiteninja / yarasploit
  YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.
  ☆44Updated last year
• Velocidex / go-prefetch
  A golang implementation of a prefetch parser.
  ☆20Updated last week
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• audibleblink / bothan
  Is this IP a C2 server?
  ☆28Updated 5 years ago
• synacktiv / AMSI-Bypass
  Lists of AMSI triggers (VBA, JScript / VBScript)
  ☆33Updated 5 years ago
• mjwhitta / win
  Windows API/constants, identity, and WinHTTP/WinINet for Go.
  ☆18Updated last month
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆61Updated last year
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆26Updated 3 years ago
• botherder / go-autoruns
  Collect autorun records from running system
  ☆60Updated 3 years ago
• zlowram / gopart
  Package that provides different PE tricks to difficult the reverse engineering of your Windows applications.
  ☆11Updated 5 years ago
• mitre / gocat
  Simplified go-cat agent for caldera
  ☆10Updated last year
• dtrizna / SysmonRNN
  All necessary code in order to feed Sysmon data into Recurrent Neural Network
  ☆17Updated 4 years ago
• jonas-koeritz / amsi
  Golang wrapper for the Microsoft Antimalware Scan Interface (AMSI)
  ☆11Updated 3 years ago
• Moriarty2016 / NimRDI
  RDI implementation in Nim
  ☆64Updated 4 years ago
• corelight / CVE-2021-31166
  HTTP Protocol Stack CVE-2021-31166
  ☆13Updated 7 months ago
• JJyyy / suricata-rules
  不定期更新suricata的检测规则
  ☆11Updated 5 years ago
• n1ght-w0lf / Uchihash
  A small utility to deal with malware embedded hashes.
  ☆51Updated last year
• NexusFuzzy / NanoDump
  Tool to decrypt the configuration of NanoCore and dump all used plugins
  ☆10Updated 4 years ago
• fashionproof / RunHijackHunter
  ☆16Updated 4 years ago