Yara rules written by me, for free use.
☆20Nov 26, 2021Updated 4 years ago
Alternatives and similar repositories for yara-rules
Users that are interested in yara-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Generate YARA rules from Windows API hashes for malware detection and hunting.☆17Aug 11, 2026Updated 2 months ago
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- ☆10Sep 13, 2022Updated 4 years ago
- Collection of YARA signatures from individual research☆45Nov 20, 2023Updated 2 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆24Jan 31, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A malware scanner with Yara and ClamAV binding☆12May 23, 2026Updated 5 months ago
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated last year
- Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.☆16May 21, 2021Updated 5 years ago
- Collection of Malware Lures☆23Oct 8, 2021Updated 5 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.☆18Sep 10, 2023Updated 3 years ago
- A Python wrapper library for libyara and a local server for fully utilizing the CPUs of the system to scan with yara...with additional ca…☆19Dec 8, 2022Updated 3 years ago
- ☆24Dec 15, 2022Updated 3 years ago
- Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.☆39Dec 17, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of my public YARA signatures for various malware families☆30Sep 20, 2024Updated 2 years ago
- Repository of Yara rules created by the Stratosphere team☆29Jul 8, 2021Updated 5 years ago
- ☆14Mar 9, 2023Updated 3 years ago
- ☆13Jan 26, 2026Updated 9 months ago
- ☆14Jun 15, 2026Updated 4 months ago
- Various Yara signatures (possibly to be included in a release later).☆89May 23, 2019Updated 7 years ago
- Packer Templates☆18May 9, 2022Updated 4 years ago
- Welcome to the Pressidium® Yara Rules repository. This section contains a carefully curated collection of Yara rules specifically designe…☆19Nov 5, 2023Updated 2 years ago
- A collection of shellcode hashes☆17Aug 15, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆37Mar 15, 2023Updated 3 years ago
- Notes and IoCs of fresh malware☆63Jul 5, 2024Updated 2 years ago
- ☆16Sep 26, 2022Updated 4 years ago
- Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies☆109Mar 4, 2021Updated 5 years ago
- This repository regroups the Yara Rules for the Unprotect Project☆26Nov 19, 2020Updated 5 years ago
- Lists of unsafe words in multiple languages as YARA rules☆30Feb 2, 2026Updated 8 months ago
- IOCParser extracts Indicators of Compromise from reports, feeds, URLs, stdin, and directory trees. It supports refanging, MISP warning-li…☆19Jun 22, 2026Updated 4 months ago
- Generate malware traces for detection tests☆19Oct 13, 2026Updated 2 weeks ago
- Yara rules for detecting malware☆22Sep 9, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆16Oct 25, 2022Updated 4 years ago
- A golang CLI tool to download malware from a variety of sources.☆149Jul 3, 2025Updated last year
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 6 months ago
- Easily scan with multiple yara rules from different sources.☆14Mar 9, 2024Updated 2 years ago
- The NowSecure Mobile Security Report☆10Nov 16, 2016Updated 9 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆23Jul 2, 2015Updated 11 years ago