pracsec / YaraToolsLinks
Over 100K open-source YARA signatures evaluated against over 280K files to give insights into the performance of each YARA rule.
☆26Updated 2 years ago
Alternatives and similar repositories for YaraTools
Users that are interested in YaraTools are comparing it to the libraries listed below
Sorting:
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆28Updated 2 years ago
- Placeholder for my detection repo and misc detection engineering content☆42Updated 2 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- Detection rule validation☆40Updated 2 years ago
- ☆18Updated last year
- ☆25Updated 3 years ago
- Scans a list of raccoon servers from Tria.ge and extracts the config☆15Updated 2 years ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆53Updated 2 years ago
- A project created with an aim to emulate and test exfiltration of data over different network protocols.☆31Updated 2 years ago
- CIS Benchmark testing of Windows SIEM configuration☆45Updated 2 years ago
- A scanner that files with compromised or untrusted code signing certificates written in python.☆64Updated 2 years ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated 2 years ago
- Triaging Windows event logs based on SANS Poster☆41Updated 2 months ago
- Yara Rules for Modern Malware☆78Updated last year
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated 2 years ago
- CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"☆51Updated 3 years ago
- Open IOC sharing platform☆61Updated last year
- ☆27Updated 11 months ago
- ☆67Updated 2 years ago
- Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation☆106Updated 3 years ago
- Look into EDR events from network☆23Updated this week
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Updated 2 years ago
- Hive v5 file decryption algorithm☆34Updated 2 years ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆61Updated 3 years ago
- Method of finding interesting domains using keywords + JARMs☆13Updated 2 years ago
- ☆14Updated 3 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆54Updated 11 months ago
- Bash tool used for proactive detection of malicious activity on macOS systems.☆38Updated last month
- Collection of generic YARA rules☆16Updated 3 months ago
- ATLAS - Malware Analysis Description☆21Updated 2 years ago