Repository with selected IOCs and YARA rules for threat hunting.
☆35Apr 8, 2026Updated 3 months ago
Alternatives and similar repositories for ioc_signatures
Users that are interested in ioc_signatures are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise☆20May 18, 2026Updated 2 months ago
- A guide on how to write fast and memory friendly YARA rules☆174Feb 11, 2025Updated last year
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Command line interface client to RFQuack dongles☆10Sep 23, 2022Updated 3 years ago
- Windows privileges add to the complexity of Windows user permissions. Each additional user added to a group could lead to a domain compro…☆10Mar 2, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Collection of rules created using YARA-Signator over Malpedia☆147May 18, 2026Updated 2 months ago
- Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloade…☆16Jun 26, 2026Updated last month
- Generator of regular expressions☆15Apr 11, 2025Updated last year
- ☆11Mar 12, 2021Updated 5 years ago
- PoC compilation of libyara into WASM, for potential future CyberChef integration☆14Sep 18, 2022Updated 3 years ago
- Configurations for DFIR ORC☆28Jul 2, 2026Updated 3 weeks ago
- A YARA Rule Performance Measurement Tool☆64Feb 26, 2024Updated 2 years ago
- Detection in the form of Yara, Snort and ClamAV signatures.☆257Nov 1, 2024Updated last year
- A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.☆40Mar 25, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 5 years ago
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆79Jan 26, 2026Updated 6 months ago
- A collection of my public YARA signatures for various malware families☆30Sep 20, 2024Updated last year
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- A specification and style guide for YARA rules☆76Feb 17, 2024Updated 2 years ago
- ☆19Jul 21, 2022Updated 4 years ago
- Public repository of Sigma and YARA rules created by Synacktiv☆20Oct 15, 2025Updated 9 months ago
- YARA duplicate rule detection and removal. YARA rule index creation. YARA rule file merger.☆10Jan 19, 2026Updated 6 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Jun 14, 2022Updated 4 years ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Jun 27, 2025Updated last year
- C# Desktop GUI application that either performs YARA scan locally or prepares the scan in Active Directory domain environment with a few …☆36Dec 1, 2021Updated 4 years ago
- Yara Rules for Modern Malware☆80Mar 3, 2024Updated 2 years ago
- Collection of private Yara rules.☆388Jan 28, 2026Updated 6 months ago
- CLI tool to compute the TypeRefHash for .NET binaries.☆19Nov 10, 2021Updated 4 years ago
- Is a portable forensic tool for analyzing Windows logs, pre-organized according to the methodology outlined in this job: https://cybersec…☆16Jul 19, 2025Updated last year
- Hunt the windows Registry automatically using VQL☆18May 4, 2026Updated 2 months ago
- A library implementing a generic SQL like query language.☆22Jun 4, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Maps process creation logged by Sysmon uses Google Org Chart API☆23Mar 5, 2016Updated 10 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 7 months ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Nov 19, 2023Updated 2 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Nov 27, 2020Updated 5 years ago
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 5 years ago
- A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.☆58May 24, 2021Updated 5 years ago