Alternatives and similar repositories for yara-x

Users that are interested in yara-x are comparing it to the libraries listed below

• microsoft / avml
  AVML - Acquire Volatile Memory for Linux
  ☆1,029Updated this week
• kunai-project / kunai
  Threat-hunting tool for Linux
  ☆1,024Updated 3 weeks ago
• omerbenamram / evtx
  A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
  ☆852Updated 2 weeks ago
• CybercentreCanada / assemblyline
  AssemblyLine 4: File triage and malware analysis
  ☆403Updated this week
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆884Updated last month
• elastic / protections-artifacts
  Elastic Security detection content for Endpoint
  ☆1,338Updated last week
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,248Updated last week
• binref / refinery
  High Octane Triage Analysis
  ☆804Updated last week
• fox-it / dissect
  Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…
  ☆1,056Updated 3 weeks ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆900Updated 2 months ago
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆659Updated last week
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆435Updated 5 months ago
• cisagov / thorium
  A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.
  ☆970Updated last week
• cert-ee / cuckoo3
  Cuckoo3 is a Python 3 open source automated malware analysis system.
  ☆784Updated last week
• MBCProject / mbc-markdown
  MBC content in markdown
  ☆503Updated 6 months ago
• microsoft / RIFT
  Rust Library Recognition Project for Rust Malware by the MSTIC-MIRAGE Team
  ☆313Updated last month
• bartblaze / Yara-rules
  Collection of private Yara rules.
  ☆374Updated 3 weeks ago
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆451Updated 2 weeks ago
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆2,032Updated 5 months ago
• Yamato-Security / hayabusa
  Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
  ☆2,958Updated this week
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,348Updated last week
• mandiant / GoReSym
  Go symbol recovery tool
  ☆862Updated 2 weeks ago
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆262Updated this week
• k1nd0ne / VolWeb
  A centralized and enhanced memory analysis platform
  ☆510Updated 5 months ago
• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆689Updated last month
• SitinCloud / Owlyshield
  Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).
  ☆420Updated last year
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆346Updated 5 months ago
• 0xrawsec / whids
  Open Source EDR for Windows
  ☆1,282Updated 2 years ago
• CERT-Polska / mwdb-core
  Malware repository component for samples & static configuration with REST API interface.
  ☆371Updated last week
• MagnetForensics / dumpit-linux
  Memory acquisition for Linux that makes sense.
  ☆213Updated 2 years ago