certtools / malware_name_mappingLinks
A mapping of used malware names to commonly known family names
☆62Updated 2 years ago
Alternatives and similar repositories for malware_name_mapping
Users that are interested in malware_name_mapping are comparing it to the libraries listed below
Sorting:
- Repository containing IOCs, CSV and MISP JSON from our blogs☆81Updated 4 years ago
- A Yara rule generator for finding related samples and hunting☆159Updated 3 years ago
- Community modules for FAME☆65Updated last month
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆73Updated 6 years ago
- Validates yara rules and tries to repair the broken ones.☆40Updated 5 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 7 years ago
- Web based Manager for Yara Rules☆58Updated 5 years ago
- A taxonomy and dictionary of malware behaviors.☆43Updated 6 years ago
- This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…☆62Updated last year
- Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules☆50Updated 2 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 3 months ago
- YARA rules for use with ProcFilter☆87Updated 8 years ago
- Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies☆104Updated 4 years ago
- A collection of my public YARA signatures for various malware families☆30Updated last year
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆83Updated last year
- Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation☆79Updated last month
- Parse YARA rules and operate over them more easily.☆192Updated 8 months ago
- Definition, description and relationship types of MISP objects☆101Updated last month
- ☆34Updated 5 years ago
- PE Import Hash Generator☆79Updated 8 years ago
- Malware Sinkhole List in various formats☆102Updated 3 years ago
- Python IOC Editor☆63Updated 10 years ago
- A YARA Rule Performance Measurement Tool☆60Updated last year
- Sandbox feature upgrade with the help of wrapped samples☆76Updated 7 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Updated 7 years ago
- My Yara Rules Collection☆53Updated 9 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Updated 5 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆24Updated 8 years ago
- Django web interface for managing Yara rules☆196Updated 7 years ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆110Updated 7 years ago