Alternatives and similar repositories for YARA

Users that are interested in YARA are comparing it to the libraries listed below

• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆38Updated 9 years ago
• mandiant / rvmi-qemu
  QEMU with rVMI extensions
  ☆25Updated 7 years ago
• mandiant / remote_lookup
  Resolves DLL API entrypoints for a process w/ remote query capabilities.
  ☆55Updated 8 years ago
• Mipu94 / BroIDS_Unicorn
  simple plugin to detect shellcode on Bro IDS with Unicorn
  ☆33Updated 8 years ago
• ShellcodeSmuggler / IAT_POC
  POC for IAT Parsing Payloads
  ☆48Updated 8 years ago
• bsi-group / officefileinfo
  officefileinfo is a python script to help analyse the newer Microsoft Office file formats. There are numerous tools for dealing with the …
  ☆16Updated 9 years ago
• Th4nat0s / No_Sandboxes
  Test suite for bypassing Malware sandboxes.
  ☆39Updated 10 years ago
• jacobsoo / DDE-Extractor
  This script is used for extracting DDE in docx and xlsx
  ☆12Updated 7 years ago
• dungtv543 / Dutas
  Analysis PE file or Shellcode
  ☆49Updated 8 years ago
• jjo-sec / volatility_plugins
  Volatility Plugins
  ☆21Updated 10 years ago
• GelosSnake / MalwareResearchAPI
  API functions for Malware Research
  ☆35Updated 6 years ago
• malware-kitten / yara_sig_tool
  A tool to generate yara signatures from function blocks
  ☆19Updated 10 years ago
• mandiant / pycommands
  PyCommand Scripts for Immunity Debugger
  ☆36Updated 11 years ago
• olliencc / WinBinaryAudit
  GSAudit at Symantec, ExeAudit at RIM, RECX Binary Assurance for Windows at Recx etc. - core library now WinBinaryAudit
  ☆24Updated 10 years ago
• carlpulley / volatility
  A collection of Volatility Framework plugins.
  ☆27Updated 11 years ago
• eset / volatility-browserhooks
  Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
  ☆41Updated 6 years ago
• nccgroup / WindowsFirewallHookDriverEnumeration
  Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003
  ☆20Updated 10 years ago
• JamesHabben / MalwareStuff
  ☆16Updated 10 years ago
• ctxis / pac-leak-demo
  PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk
  ☆30Updated 8 years ago
• helpsystems / sentinel
  Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect…
  ☆71Updated 11 years ago
• gungage53 / windows-exploit-development
  ☆43Updated 7 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 7 years ago
• 0pc0deFR / YaraRules
  Multiple rules for yara-project for detect compiler/packer/protector
  ☆33Updated 5 years ago
• silascutler / IDA_AutoAnalysis
  IDA Pro plugin that rename functions on load, based on functionality
  ☆19Updated 7 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆38Updated 8 years ago
• necst / crave
  Framework to automatically test and explore the capabilities of generic AV engines
  ☆69Updated 6 years ago
• scudette / memory-analysis
  A Rekall interactive document for a Memory Analysis workshop/course.
  ☆43Updated 8 years ago
• bsi-group / autorun-logger-server
  Server for receiving autorun data from the clients
  ☆13Updated 7 years ago
• arbor / reversing
  ASERT shared scripts for reversing
  ☆32Updated 7 years ago
• Yara-Rules / r2yara
  r2yara - Module for Yara using radare2 information
  ☆35Updated last year