Alternatives and similar repositories for YARAify

Users that are interested in YARAify are comparing it to the libraries listed below

• mandiant / pulsesecure_exploitation_countermeasures
  ☆23Updated 2 years ago
• 2igosha / sunburst_dga
  ☆22Updated 4 years ago
• whichbuffer / Lockbit-Black-3.0
  ☆24Updated 3 years ago
• fboldewin / misc_malware
  ☆37Updated 3 years ago
• malvuln / viruscreds
  Database of backdoor passwords used by Malware, uncovered by the Malvuln project.
  ☆26Updated 8 months ago
• stairwell-inc / threat-research
  Repository of tools, YARA rules, and code-snippets from Stairwell's research team.
  ☆22Updated last year
• BushidoUK / Malware-Zoo
  Hashes of infamous malware
  ☆26Updated 2 years ago
• StrangerealIntel / DeltaFlare
  ☆12Updated 4 years ago
• nccgroup / mimikatz-detector-busylight
  USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…
  ☆20Updated 2 years ago
• cocaman / yara-scan-service
  Repository for scripts and tips for "Yara Scan Service"
  ☆20Updated 2 years ago
• kyle-phillips / adversarial-tools
  A collection of tools adversaries commonly use in an attack.
  ☆14Updated 7 months ago
• Symantec / threathunters
  ☆29Updated 6 months ago
• malpedia / malpedia-flossed
  FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
  ☆57Updated last month
• chaitanyakrishna / IOCScraper
  IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.
  ☆35Updated 3 years ago
• cudeso / misp-reporting
  A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…
  ☆11Updated 3 weeks ago
• sourcefrenchy / DEFCON-30---Exotic-Data-Exfiltration
  Slides from my talk at the Adversary Village, Defcon 30
  ☆29Updated 2 years ago
• k3idii / ION
  Indicators of Normality
  ☆11Updated 2 years ago
• csirt-tooling-org / csirt-tooling-best-practices
  CSIRT Tooling: Best Practices in Developing, Maintaining and Distributing Open Source Tools
  ☆16Updated 3 years ago
• ninoseki / ioc-extractor
  An npm package for extracting common IoC (Indicator of Compromise) from a block of text
  ☆58Updated 5 months ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 4 years ago
• advanced-threat-research / DarkSide-Config-Extract
  ☆35Updated 3 years ago
• NextronSystems / TA-aurora
  Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …
  ☆13Updated 2 years ago
• nasbench / Awesome-Detection-Engineering
  Resources and Discussions About Detection Engineering
  ☆12Updated 2 years ago
• qeeqbox / octopus
  Pure Honeypots with an automated bash script
  ☆20Updated 3 years ago
• nccgroup / Threat-Intelligence-Alerts
  Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding in…
  ☆25Updated 2 years ago
• DODC / turncoat
  ☆42Updated 3 months ago
• MISP / misp-sighting-server
  MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…
  ☆15Updated last year
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• NoDataFound / RiskIQ.SunBurst.Hunter
  The Purpose of this research tool is to provide a Python client into RiskIQ API services.
  ☆22Updated 4 years ago
• SentineLabs / TrickBot-Anchor
  This is a repository for the public blog with Labs indicators of compromise.
  ☆10Updated 5 years ago