yara detection rules for hunting with the threathunting-keywords project
☆171May 11, 2025Updated last year
Alternatives and similar repositories for ThreatHunting-Keywords-yara-rules
Users that are interested in ThreatHunting-Keywords-yara-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Awesome list of keywords and artifacts for Threat Hunting sessions☆684Aug 4, 2025Updated last year
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆205Dec 20, 2024Updated last year
- Awesome Security lists for SOC/CERT/CTI☆1,965Updated this week
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆450May 21, 2026Updated 5 months ago
- Mapping of open-source detection rules and atomic tests.☆218Jul 15, 2026Updated 3 months ago
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆44Jun 28, 2025Updated last year
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security f…☆14Updated this week
- Collection of rules created using YARA-Signator over Malpedia☆152Sep 28, 2026Updated last month
- This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…☆26Oct 3, 2023Updated 3 years ago
- JPCERT/CC public YARA rules repository☆112Mar 9, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆122May 26, 2025Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloade…☆17Updated this week
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- Collection of YARA signatures from individual research☆45Nov 20, 2023Updated 2 years ago
- Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports☆179Updated this week
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated 2 weeks ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆353Updated this week
- ReversingLabs YARA Rules☆952Nov 3, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A preconfigured Velociraptor triage collector☆80Oct 19, 2026Updated 2 weeks ago
- ☆21Jul 29, 2025Updated last year
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆646May 21, 2026Updated 5 months ago
- Detection in the form of Yara, Snort and ClamAV signatures.☆257Nov 1, 2024Updated 2 years ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆58Apr 22, 2025Updated last year
- APT hub, It help's research to collect information and data on the latest APT activities. It collects data on APT profiles, IOCs(1 yr), a…☆56Mar 11, 2025Updated last year
- God Mode Detection Rules☆137Aug 8, 2024Updated 2 years ago
- ShellSweeping the evil.☆185Jul 22, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Incident Response documents and tooling☆133Jul 22, 2026Updated 3 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆874Updated this week
- Velociraptor Server hosted in Azure App Service☆59Jun 4, 2025Updated last year
- A curated list of awesome YARA rules, tools, and people.☆4,314Jun 15, 2026Updated 4 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆237Oct 27, 2026Updated last week
- Elastic Security Labs' malware analysis and reverse engineering library☆81Sep 14, 2026Updated last month
- Documentation and scripts to properly enable Windows event logs.☆725Oct 3, 2025Updated last year