Alternatives and similar repositories for yara-rules-re

Users that are interested in yara-rules-re are comparing it to the libraries listed below

• alexander-hanel / gopep
  Go Lang Portable Executable Parser
  ☆39Updated 4 years ago
• reb311ion / CapaExplorer
  Capa analysis importer for Ghidra.
  ☆62Updated 4 years ago
• Dump-GUY / ghidra_scripts
  ☆71Updated last year
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 5 years ago
• ulexec / EmotetCFU
  WIP Emotet Control Flow Unflattening using miasm and radare2
  ☆23Updated 2 years ago
• danielplohmann / mcrit
  The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…
  ☆93Updated 3 weeks ago
• c3rb3ru5d3d53c / mwcfg-modules
  Malware Configuration Extraction Modules
  ☆51Updated last year
• intel471 / coderex
  A tool that automates regex generation for the x86 and x86-64 instruction sets
  ☆72Updated last year
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 3 years ago
• immortalp0ny / yarg
  Yet another rule generator for Yara
  ☆29Updated 2 months ago
• hasherezade / funky_malware_formats
  Parsers for custom malware formats ("Funky malware formats")
  ☆96Updated 3 years ago
• trendmicro / telfhash
  Symbol hash for ELF files
  ☆112Updated 3 years ago
• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆38Updated 2 years ago
• benoitsevens / applying-ttd-to-malware-analysis
  Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
  ☆42Updated 5 years ago
• arieljt / VTCodeBlocks-Maltego
  Maltego transforms to pivot between PE files based on their VirusTotal codeblocks
  ☆18Updated 4 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆76Updated 10 years ago
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆49Updated 3 years ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆34Updated 6 years ago
• iNod3 / sandbagility
  ☆23Updated 6 years ago
• conix-security / machoke
  ☆52Updated 6 years ago
• tbarabosch / apihash_to_yara
  Generates YARA rules to detect malware using API hashing
  ☆17Updated 4 years ago
• fkie-cad / RoAMer
  Robust Automated Malware Unpacker
  ☆85Updated 2 years ago
• nao-sec / rr_decoder
  Royal Road RTF Weaponizer object decoder
  ☆24Updated 10 months ago
• mbrengel / yarix
  ☆60Updated 4 years ago
• avast / yarang
  Alternative YARA scanning engine
  ☆72Updated 3 years ago
• intezer / analyze-community-ghidra-plugin
  Ghidra plugin for https://analyze.intezer.com
  ☆71Updated 2 years ago
• intezer / analyze-scripts
  ☆27Updated 2 years ago
• OALabs / trashdbg
  TrashDBG the world's worse debugger
  ☆23Updated 3 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 5 years ago
• c3rb3ru5d3d53c / karton-unpacker
  A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.
  ☆57Updated 4 years ago