Alternatives and similar repositories for yara-rules-re

Users that are interested in yara-rules-re are comparing it to the libraries listed below

• alexander-hanel / gopep
  Go Lang Portable Executable Parser
  ☆39Updated 4 years ago
• reb311ion / CapaExplorer
  Capa analysis importer for Ghidra.
  ☆63Updated 5 years ago
• c3rb3ru5d3d53c / mwcfg-modules
  Malware Configuration Extraction Modules
  ☆51Updated 2 years ago
• intel471 / coderex
  A tool that automates regex generation for the x86 and x86-64 instruction sets
  ☆71Updated last year
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 5 years ago
• danielplohmann / mcrit
  The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…
  ☆95Updated 2 weeks ago
• Dump-GUY / ghidra_scripts
  ☆73Updated 2 years ago
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 3 years ago
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆49Updated 3 years ago
• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆37Updated 2 years ago
• ulexec / EmotetCFU
  WIP Emotet Control Flow Unflattening using miasm and radare2
  ☆23Updated 2 years ago
• trendmicro / telfhash
  Symbol hash for ELF files
  ☆111Updated 3 years ago
• mbrengel / yarix
  ☆63Updated 4 years ago
• iNod3 / sandbagility
  ☆23Updated 6 years ago
• benoitsevens / applying-ttd-to-malware-analysis
  Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
  ☆42Updated 6 years ago
• avast / yarang
  Alternative YARA scanning engine
  ☆73Updated 3 years ago
• nao-sec / rr_decoder
  Royal Road RTF Weaponizer object decoder
  ☆24Updated last year
• n1ght-w0lf / HawkEye
  Malware dynamic instrumentation tool based on frida framework
  ☆110Updated 5 years ago
• hasherezade / funky_malware_formats
  Parsers for custom malware formats ("Funky malware formats")
  ☆98Updated 3 years ago
• immortalp0ny / yarg
  Yet another rule generator for Yara
  ☆29Updated 5 months ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆34Updated 6 years ago
• avast / yari
  YARI is an interactive debugger for YARA Language.
  ☆90Updated 2 months ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆78Updated 11 years ago
• n1ght-w0lf / Uchihash
  A small utility to deal with malware embedded hashes.
  ☆52Updated 2 years ago
• RichHeaderResearch / RichPE
  Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks
  ☆70Updated 4 years ago
• tbarabosch / apihash_to_yara
  Generates YARA rules to detect malware using API hashing
  ☆17Updated 4 years ago
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆151Updated 5 months ago
• arieljt / VTCodeBlocks-Maltego
  Maltego transforms to pivot between PE files based on their VirusTotal codeblocks
  ☆18Updated 4 years ago
• conix-security / machoke
  ☆53Updated 7 years ago
• goretk / pygore
  pyGoRE - Python library for analyzing Go binaries
  ☆66Updated 3 years ago