[Moved to Codeberg] Tools for inspecting YARA bytecode
☆22Jul 1, 2020Updated 6 years ago
Alternatives and similar repositories for yara-rules-re
Users that are interested in yara-rules-re are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- Carving tool based in Radare2 & Yara☆17Oct 30, 2018Updated 7 years ago
- ssdeep for python on windows☆22Feb 7, 2026Updated 7 months ago
- Antivirus for Linux operating system☆10Nov 28, 2016Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloade…☆17Jun 26, 2026Updated 2 months ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- Reverse Windows shell over TLS☆19Mar 3, 2016Updated 10 years ago
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 5 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- Trigram database written in C++, suited for malware indexing☆128Jan 26, 2026Updated 7 months ago
- server for indexing and querying passive DNS observations☆51Sep 11, 2026Updated last week
- CAPE Auto-Hardened Installer☆28Jan 28, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago
- THOR Thunderstorm Collectors☆28Updated this week
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 4 years ago
- Transform dumped executable memory back into an identical match from disk. Use network or local database to de-locate relocated binaries…☆11Jan 10, 2016Updated 10 years ago
- View and edit files in hexadecimal or in ASCII☆10Jun 25, 2020Updated 6 years ago
- Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…☆130Sep 24, 2023Updated 2 years ago
- OpenRISC 1000 processor module for IDA 7.x☆13Feb 13, 2024Updated 2 years ago
- This script is used for extracting DDE in docx and xlsx☆12Dec 8, 2017Updated 8 years ago
- grap: define and match graph patterns within binaries☆155May 5, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collection of YARA signatures from individual research☆45Nov 20, 2023Updated 2 years ago
- Deduplication of yara rules☆10Sep 18, 2017Updated 9 years ago
- Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets☆34Jan 14, 2026Updated 8 months ago
- Application whitelist--verify exectuabl/so ELF and script and interp program signature in kernel when will running☆12Jan 15, 2024Updated 2 years ago
- Authenticode-parser is a simple C library for Authenticode format parsing using OpenSSL.☆26Mar 2, 2024Updated 2 years ago
- simple YARA-based IOC scanner☆181Mar 17, 2026Updated 6 months ago
- Integration between MISP platform and McAfee MVISION EDR☆14Mar 14, 2022Updated 4 years ago
- Suricata rules to detect Winnti communication☆16Mar 5, 2018Updated 8 years ago
- BitView's translations.☆12Sep 30, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- patched up patchdiff2 to compile and work with IDA 6 on OSX☆18Mar 8, 2011Updated 15 years ago
- Free and opensource antivirus based on ClamAV.☆16Updated this week
- ☆12Nov 12, 2022Updated 3 years ago
- ☆15Sep 26, 2022Updated 3 years ago
- Detection Engineering with YARA☆88Jan 6, 2024Updated 2 years ago
- NSRL BloomFilter, Mandiant BloomFilter, Hyperloglog Malware Data Structure☆15Mar 14, 2014Updated 12 years ago
- Reads and prints information from the website MalAPI.io☆38Jan 18, 2022Updated 4 years ago