The pattern matching swiss knife
☆9,788Jul 30, 2026Updated last week
Alternatives and similar repositories for yara
Users that are interested in yara are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repository of yara rules☆4,864Apr 17, 2024Updated 2 years ago
- A curated list of awesome YARA rules, tools, and people.☆4,251Jun 15, 2026Updated last month
- Loki - Simple IOC and YARA Scanner☆3,772Jan 12, 2026Updated 6 months ago
- Main Sigma Rule Repository☆10,848Updated this week
- yarGen is a generator for YARA rules☆1,804Jan 10, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The Python interface for YARA☆751Jul 28, 2026Updated last week
- An advanced memory forensics framework☆8,058May 16, 2025Updated last year
- Cuckoo Sandbox is an automated dynamic malware analysis system☆5,965May 3, 2022Updated 4 years ago
- YARA signature and IOC database for my scanners and tools☆2,999Updated this week
- MISP (core software) - Open Source Threat Intelligence and Sharing Platform☆6,452Updated this week
- A little tool to play with Windows security☆21,750Apr 17, 2026Updated 3 months ago
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,359Updated this week
- Defund the Police.☆14,092Jun 7, 2024Updated 2 years ago
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,129Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Impacket is a collection of Python classes for working with network protocols.☆15,970Updated this week
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆8,917Jun 23, 2026Updated last month
- PowerSploit - A PowerShell Post-Exploitation Framework☆13,090Aug 17, 2020Updated 5 years ago
- Six Degrees of Domain Admin☆10,597Mar 2, 2026Updated 5 months ago
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆4,112Updated this week
- Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.☆7,846Updated this week
- UNIX-like reverse engineering framework and command-line toolset☆24,511Updated this week
- Empire is a PowerShell and Python post-exploitation agent.☆7,861Jan 19, 2020Updated 6 years ago
- Metasploit Framework☆38,753Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,626Jan 12, 2026Updated 6 months ago
- TheHive is a Collaborative Case Management Platform, now distributed as a commercial version☆3,946Jul 25, 2025Updated last year
- Sysmon configuration file template with default high-quality event tracing☆5,610Jul 3, 2024Updated 2 years ago
- Automated Adversary Emulation Platform☆7,170Updated this week
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆8,725Jul 31, 2026Updated last week
- Indicators of Compromises (IOC) of our various investigations☆1,972Jun 25, 2026Updated last month
- Yara integrated software to handle archive file data.☆324May 9, 2022Updated 4 years ago
- A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open…☆13,267Jul 24, 2026Updated 2 weeks ago
- Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OIS…☆6,520Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A rewrite of YARA in Rust.☆1,237Updated this week
- A curated list of Awesome Threat Intelligence resources☆10,511May 31, 2026Updated 2 months ago
- Arkime is an open source, large scale, full packet capturing, indexing, and database system.☆7,433Updated this week
- Volatility 3.0 development☆4,305Jul 23, 2026Updated 2 weeks ago
- CTF framework and exploit development library☆13,630Updated this week
- GRR Rapid Response: remote live forensics for incident response☆5,084May 12, 2026Updated 2 months ago
- Rekall Memory Forensic Framework☆2,007Oct 18, 2020Updated 5 years ago