naxonez / YaraRules

Related projects: ⓘ

• securitykitten / yara_sig_tool
  A tool to generate yara signatures from function blocks
  ☆19Updated 9 years ago
• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆34Updated 8 years ago
• nccgroup / WindowsFirewallHookDriverEnumeration
  Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003
  ☆20Updated 9 years ago
• cylance / GetNETGUIDs
  Extract GUIDs from .NET assemblies
  ☆21Updated 8 years ago
• anthrotype / verify-sigs
  Automatically exported from code.google.com/p/verify-sigs
  ☆18Updated 8 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated 11 months ago
• Kafeine / public
  ☆19Updated 6 years ago
• shahriyarj / MCEDP
  ☆37Updated this week
• fr0gger / Yara-Unprotect
  This repository regroups the Yara Rules for the Unprotect Project
  ☆24Updated 3 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆37Updated 7 years ago
• dungtv543 / Dutas
  Analysis PE file or Shellcode
  ☆48Updated 8 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆45Updated 4 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆52Updated 6 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• colincowie / viper-plugins
  Plugins for the Viper Framework
  ☆14Updated 4 years ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated last year
• jacobsoo / DDE-Extractor
  This script is used for extracting DDE in docx and xlsx
  ☆12Updated 6 years ago
• TKCERT / winnti-detector
  Network detector for Winnti malware
  ☆20Updated 6 years ago
• pidydx / PyIOCe
  Python OpenIOC Editor
  ☆17Updated 8 years ago
• TheEnergyStory / malware_analysis
  Malware analyses and helpful scripts
  ☆29Updated 2 years ago
• nccgroup / yaml2yara
  Generate bulk YARA rules from YAML input
  ☆21Updated 4 years ago
• robbyFux / vtTool
  Tools
  ☆13Updated last year
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆23Updated 7 years ago
• idiom / activemime-format
  ActiveMime File Format Documentation
  ☆17Updated 3 years ago
• JamesHabben / MalwareStuff
  ☆16Updated 9 years ago
• davidpany / rr_parseomater
  RegRipper wrapper for simplified bulk parsing or registry hives
  ☆10Updated 6 years ago
• seth1002 / tracecorn_tina
  a modified version base on Tracecorn
  ☆20Updated 4 years ago
• jjo-sec / volatility_plugins
  Volatility Plugins
  ☆21Updated 9 years ago
• mauronz / malware_analysis
  ☆15Updated 3 years ago
• R3MRUM / loki-parse
  A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and sec…
  ☆12Updated 2 years ago