Repository with selected IOCs and YARA rules for threat hunting.
☆35Apr 8, 2026Updated 3 months ago
Alternatives and similar repositories for ioc_signatures
Users that are interested in ioc_signatures are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise☆20May 18, 2026Updated last month
- A guide on how to write fast and memory friendly YARA rules☆173Feb 11, 2025Updated last year
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Collection of rules created using YARA-Signator over Malpedia☆146May 18, 2026Updated last month
- ☆11Mar 12, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 7 months ago
- Yara rules☆21Mar 27, 2023Updated 3 years ago
- PoC compilation of libyara into WASM, for potential future CyberChef integration☆14Sep 18, 2022Updated 3 years ago
- Detection in the form of Yara, Snort and ClamAV signatures.☆254Nov 1, 2024Updated last year
- A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.☆40Mar 25, 2026Updated 3 months ago
- Configurations for DFIR ORC☆28Updated this week
- A YARA Rule Performance Measurement Tool☆63Feb 26, 2024Updated 2 years ago
- Hunt the windows Registry automatically using VQL☆18May 4, 2026Updated 2 months ago
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆79Jan 26, 2026Updated 5 months ago
- ☆12May 2, 2022Updated 4 years ago
- Repository to provide files related to our blog articles.☆16May 26, 2025Updated last year
- A collection of my public YARA signatures for various malware families☆30Sep 20, 2024Updated last year
- A collection of my yara rules☆34Jul 11, 2023Updated 2 years ago
- ☆19Jul 21, 2022Updated 3 years ago
- A specification and style guide for YARA rules☆75Feb 17, 2024Updated 2 years ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Jun 27, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Jun 14, 2022Updated 4 years ago
- YARA duplicate rule detection and removal. YARA rule index creation. YARA rule file merger.☆10Jan 19, 2026Updated 5 months ago
- C# Desktop GUI application that either performs YARA scan locally or prepares the scan in Active Directory domain environment with a few …☆36Dec 1, 2021Updated 4 years ago
- Yara Rules for Modern Malware☆80Mar 3, 2024Updated 2 years ago
- Collection of private Yara rules.☆385Jan 28, 2026Updated 5 months ago
- CLI tool to compute the TypeRefHash for .NET binaries.☆19Nov 10, 2021Updated 4 years ago
- A library implementing a generic SQL like query language.☆22Jun 4, 2026Updated last month
- Maps process creation logged by Sysmon uses Google Org Chart API☆23Mar 5, 2016Updated 10 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Nov 27, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Nov 19, 2023Updated 2 years ago
- ☆21May 28, 2026Updated last month
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 5 years ago
- A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.☆58May 24, 2021Updated 5 years ago
- Some ELF Malwares☆10Mar 11, 2022Updated 4 years ago
- Collection of Suricata rule sets that I use modified to my environments.☆38Sep 13, 2020Updated 5 years ago