Analyze binaries collected in VMware Carbon Black EDR against Yara rules.
☆39Jul 1, 2026Updated 2 months ago
Alternatives and similar repositories for cb-yara-connector
Users that are interested in cb-yara-connector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Report Generation from the Carbon Black REST API☆15Mar 24, 2022Updated 4 years ago
- Red Canary Carbon Black API☆20Jan 30, 2016Updated 10 years ago
- Carbon Black Feeds☆74Apr 4, 2023Updated 3 years ago
- Carbon Black integration Python utility library☆12Oct 29, 2020Updated 5 years ago
- Carbon Black API - Python language bindings☆146Aug 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.☆73Jul 13, 2026Updated 2 months ago
- Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.☆15Jul 1, 2022Updated 4 years ago
- Community Sharing Repository for Carbon Black and Bit9 Platforms☆27Apr 4, 2022Updated 4 years ago
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- Lateral Movement and Data Access artifacts for Velociraptor☆17Dec 2, 2025Updated 9 months ago
- Collection of useful, up to date, Carbon Black Response Queries☆87Oct 23, 2020Updated 5 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 7 years ago
- Detection rules to look for Log4J usage and exploitation☆18Jun 21, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆19Jan 31, 2025Updated last year
- Bit9 + Carbon Black Threat Intelligence☆81Mar 9, 2016Updated 10 years ago
- Modular command-line threat hunting tool & framework.☆17Jul 20, 2020Updated 6 years ago
- Bro/Zeek integration with osquery☆94Nov 2, 2020Updated 5 years ago
- Command line interface to Carbon Black Response☆38May 12, 2020Updated 6 years ago
- Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!☆17Nov 5, 2013Updated 12 years ago
- A collection of my dotfiles☆10Nov 2, 2018Updated 7 years ago
- A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit☆239Jul 22, 2021Updated 5 years ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆111Mar 13, 2018Updated 8 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Dec 20, 2019Updated 6 years ago
- Training materials I've written.☆11Nov 11, 2025Updated 10 months ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Jan 30, 2018Updated 8 years ago
- ☆114Jan 31, 2024Updated 2 years ago
- Automatically exported from code.google.com/p/softflowd☆16Jun 10, 2015Updated 11 years ago
- ☆17Nov 12, 2017Updated 8 years ago
- Carbonblack Live Response from the comfort of your own terminal☆20Jan 20, 2016Updated 10 years ago
- Shell scripts to audit OS X security using CIS Benchmarks.☆18Aug 9, 2016Updated 10 years ago
- A simple many-rules to many-files YARA scanner for incident response or malware zoos.☆27Jun 3, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python 3 library to build YARA rules.☆13Oct 24, 2021Updated 4 years ago
- Build Automated Machine Images for MISP☆29Jun 9, 2023Updated 3 years ago
- ☆10Apr 8, 2018Updated 8 years ago
- [DEPRECATED] A quickstart demo for Kolide tools☆51May 29, 2018Updated 8 years ago
- Indicator Extractor☆141Jul 14, 2018Updated 8 years ago
- Graph-theoretical investigation of a corpus of malware obtained from the web☆21Jul 6, 2014Updated 12 years ago
- Volatility Plugins☆22May 1, 2015Updated 11 years ago