VirusTotal / vt-public-crowdsourced-yara
Share your Yara rules with VirusTotal
☆24Updated 7 months ago
Alternatives and similar repositories for vt-public-crowdsourced-yara:
Users that are interested in vt-public-crowdsourced-yara are comparing it to the libraries listed below
- ShellSweeping the evil.☆52Updated 9 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 3 months ago
- ☆43Updated 11 months ago
- Hunt for SQLite files used by various applications☆23Updated last week
- Linux #rootkit and #malware revealer☆24Updated 7 months ago
- Scripts and lists to help generate YARA friendly string mutations☆21Updated last year
- A quick reference guide for python script development in DFIR☆16Updated last year
- Open IOC sharing platform☆56Updated 4 months ago
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆85Updated 2 years ago
- ☆19Updated 11 months ago
- Modular malware analysis artifact collection and correlation framework☆53Updated 11 months ago
- Lua plugin to extract data from Wireshark and convert it into MISP format☆47Updated last year
- ☆66Updated 2 years ago
- Detection rule validation☆41Updated last year
- Rules Shared by the Community from 100 Days of YARA 2023☆76Updated last year
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆27Updated last year
- Elastic Security Labs releases☆61Updated last week
- Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff☆54Updated last month
- ☆33Updated last year
- A web scraper to create MISP events and reports☆14Updated 2 years ago
- An extension of the sigma standard to include security metrics.☆15Updated last year
- C2 Active Scanner☆55Updated 9 months ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆63Updated 2 years ago
- HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.☆75Updated last year
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- Python based CLI for MalwareBazaar☆36Updated 4 months ago
- Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.☆16Updated 3 years ago
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆21Updated last year
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- Lazarus analysis tools and research report☆55Updated last year