Alternatives and similar repositories for yara-x:

Users that are interested in yara-x are comparing it to the libraries listed below

• microsoft / avml
  AVML - Acquire Volatile Memory for Linux
  ☆917Updated this week
• binref / refinery
  High Octane Triage Analysis
  ☆713Updated this week
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆568Updated this week
• kunai-project / kunai
  Threat-hunting tool for Linux
  ☆789Updated 2 weeks ago
• elastic / protections-artifacts
  Elastic Security detection content for Endpoint
  ☆1,134Updated this week
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆796Updated last week
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆326Updated 8 months ago
• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆590Updated this week
• omerbenamram / evtx
  A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
  ☆727Updated 2 weeks ago
• CybercentreCanada / assemblyline
  AssemblyLine 4: File triage and malware analysis
  ☆286Updated this week
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆196Updated this week
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆756Updated 3 months ago
• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,607Updated last week
• c3rb3ru5d3d53c / binlex
  A Binary Genetic Traits Lexer Framework
  ☆486Updated 2 weeks ago
• mandiant / GoReSym
  Go symbol recovery tool
  ☆671Updated 2 weeks ago
• bartblaze / Yara-rules
  Collection of private Yara rules.
  ☆343Updated this week
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,127Updated this week
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆383Updated 2 months ago
• Yamato-Security / hayabusa
  Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
  ☆2,489Updated this week
• k1nd0ne / VolWeb
  A centralized and enhanced memory analysis platform
  ☆433Updated last month
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,103Updated this week
• aquasecurity / traceeshark
  Deep Linux runtime visibility meets Wireshark
  ☆285Updated last month
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆403Updated last month
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,566Updated last week
• saferwall / saferwall
  Collaborative Malware Analysis Platform at Scale
  ☆740Updated 2 weeks ago
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆709Updated last month
• cert-ee / cuckoo3
  Cuckoo3 is a Python 3 open source automated malware analysis system.
  ☆687Updated this week
• VirusTotal / yara-python
  The Python interface for YARA
  ☆681Updated 3 months ago
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,741Updated 2 weeks ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,123Updated 2 weeks ago