The pattern matching swiss knife
☆9,964Oct 21, 2026Updated this week
Alternatives and similar repositories for yara
Users that are interested in yara are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repository of yara rules☆4,928Apr 17, 2024Updated 2 years ago
- A curated list of awesome YARA rules, tools, and people.☆4,304Jun 15, 2026Updated 4 months ago
- Loki - Simple IOC and YARA Scanner☆3,802Jan 12, 2026Updated 9 months ago
- Main Sigma Rule Repository☆11,335Updated this week
- yarGen is a generator for YARA rules☆1,822Jan 10, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cuckoo Sandbox is an automated dynamic malware analysis system☆5,958May 3, 2022Updated 4 years ago
- An advanced memory forensics framework☆8,053May 16, 2025Updated last year
- YARA signature and IOC database for my scanners and tools☆3,052Oct 17, 2026Updated last week
- MISP (core software) - Open Source Threat Intelligence and Sharing Platform☆6,617Updated this week
- The Python interface for YARA☆756Jul 28, 2026Updated 2 months ago
- A little tool to play with Windows security☆21,924Apr 17, 2026Updated 6 months ago
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,268Updated this week
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,722Updated this week
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆4,199Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Defund the Police.☆14,324Jun 7, 2024Updated 2 years ago
- Impacket is a collection of Python classes for working with network protocols.☆16,192Updated this week
- Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.☆8,131Updated this week
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆9,186Oct 7, 2026Updated 2 weeks ago
- UNIX-like reverse engineering framework and command-line toolset☆25,138Updated this week
- A rewrite of YARA in Rust.☆1,330Updated this week
- Six Degrees of Domain Admin☆10,621Mar 2, 2026Updated 7 months ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆13,074Aug 17, 2020Updated 6 years ago
- Automated Adversary Emulation Platform☆7,459Oct 12, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆8,903Sep 26, 2026Updated 3 weeks ago
- TheHive is a Collaborative Case Management Platform, now distributed as a commercial version☆3,948Jul 25, 2025Updated last year
- Sysmon configuration file template with default high-quality event tracing☆5,706Jul 3, 2024Updated 2 years ago
- Empire is a PowerShell and Python post-exploitation agent.☆7,851Jan 19, 2020Updated 6 years ago
- Metasploit Framework☆39,231Updated this week
- Volatility 3.0 development☆4,532Oct 12, 2026Updated last week
- Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OIS…☆6,765Updated this week
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,701Jan 12, 2026Updated 9 months ago
- Indicators of Compromises (IOC) of our various investigations☆1,992Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Arkime is an open source, large scale, full packet capturing, indexing, and database system.☆7,547Updated this week
- CTF framework and exploit development library☆13,789Updated this week
- Adversary Emulation Framework☆12,169Updated this week
- Yara integrated software to handle archive file data.☆328May 9, 2022Updated 4 years ago
- A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open…☆13,500Sep 14, 2026Updated last month
- Digging Deeper....☆4,373Updated this week
- GRR Rapid Response: remote live forensics for incident response☆5,104Oct 1, 2026Updated 3 weeks ago