plyara / plyara
Parse YARA rules and operate over them more easily.
☆178Updated this week
Alternatives and similar repositories for plyara:
Users that are interested in plyara are comparing it to the libraries listed below
- A Yara rule generator for finding related samples and hunting☆158Updated 2 years ago
- Django web interface for managing Yara rules☆190Updated 6 years ago
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆83Updated 2 years ago
- A mapping of used malware names to commonly known family names☆62Updated last year
- BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…☆74Updated 3 years ago
- Automatic YARA rule generation for Malpedia☆156Updated 2 years ago
- Minimal, consistent Python API for building integrations with malware sandboxes.☆138Updated 11 months ago
- ☆57Updated 3 years ago
- ☆96Updated 4 years ago
- Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation☆71Updated last month
- Set of Yara rules for finding files using magics headers☆134Updated 4 years ago
- Repository containing IOCs, CSV and MISP JSON from our blogs☆79Updated 3 years ago
- ☆150Updated 6 years ago
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆72Updated 6 years ago
- ☆125Updated 3 years ago
- A taxonomy and dictionary of malware behaviors.☆42Updated 5 years ago
- Community modules for CAPE Sandbox☆89Updated this week
- YARA rules for use with ProcFilter☆85Updated 7 years ago
- Automatic Yara Rule Generation☆331Updated 8 years ago
- c2 traffic☆189Updated last year
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆100Updated 4 months ago
- Trigram database written in C++, suited for malware indexing☆125Updated 2 months ago
- Security ML models encoded as Yara rules☆213Updated last year
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆131Updated 2 years ago
- Automated Yara Rule generation using Biclustering☆62Updated 3 years ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆82Updated last year
- Personal compilation of APT malware from whitepaper releases, documents and own research☆257Updated 5 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆97Updated this week
- This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…☆61Updated last year
- Various capabilities for static malware analysis.☆75Updated 4 months ago