anyrun / YARALinks
☆25Updated last week
Alternatives and similar repositories for YARA
Users that are interested in YARA are comparing it to the libraries listed below
Sorting:
- A YARA & Malware Analysis Toolkit written in Rust.☆51Updated last week
- A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and rea…☆104Updated last week
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Updated 3 months ago
- Quick ESXi Log Parser☆26Updated last month
- Yara Rules for Modern Malware☆79Updated last year
- Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…☆72Updated 4 months ago
- A toolkit for the post-mortem examination of Docker containers from forensic HDD copies☆106Updated last year
- Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.☆17Updated last year
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆54Updated 10 months ago
- ESXi Cyber Security Incident Response Script☆25Updated last year
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆31Updated last week
- yara detection rules for hunting with the threathunting-keywords project☆150Updated 5 months ago
- Placeholder for my detection repo and misc detection engineering content☆42Updated last year
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated this week
- Public tools, scripts or code snippets that can help when working with our products☆46Updated 5 months ago
- ☆52Updated last month
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆84Updated 4 months ago
- Detection rule validation☆41Updated last year
- A home for detection content developed by the delivr.to team☆71Updated 2 months ago
- A MITRE ATT&CK Lookup Tool☆45Updated last year
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆80Updated last week
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆25Updated 7 months ago
- pySigma Splunk backend☆41Updated last month
- A simple tool designed to create Atomic Red Team tests with ease.☆46Updated 7 months ago
- Turn any blog into structured threat intelligence.☆38Updated last week
- Remote access and Antivirus Logging Database☆43Updated last year
- The core backend server handling API requests and task management☆48Updated this week
- Penguin OS Forensic (or Flight) Recorder☆41Updated 9 months ago
- Carve file metadata from NTFS index ($I30) attributes☆71Updated last year
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year