pracsec / YaraToolsLinks
Over 100K open-source YARA signatures evaluated against over 280K files to give insights into the performance of each YARA rule.
☆24Updated 2 years ago
Alternatives and similar repositories for YaraTools
Users that are interested in YaraTools are comparing it to the libraries listed below
Sorting:
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆27Updated 2 years ago
- ☆24Updated 2 years ago
- Searching .evtx logs for remote connections☆23Updated last year
- Defeating Anti-Debugging Techniques for Malware Analysis☆13Updated 2 years ago
- Scans a list of raccoon servers from Tria.ge and extracts the config☆15Updated 2 years ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆17Updated last year
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- Pure Honeypots with an automated bash script☆20Updated 3 years ago
- Method of finding interesting domains using keywords + JARMs☆13Updated 2 years ago
- A project created with an aim to emulate and test exfiltration of data over different network protocols.☆31Updated 2 years ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆52Updated last year
- CIS Benchmark testing of Windows SIEM configuration☆44Updated 2 years ago
- ☆18Updated last year
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆20Updated 2 years ago
- Triaging Windows event logs based on SANS Poster☆39Updated 2 years ago
- The Catherine Framework is a general-purpose cybersecurity framework built to provide extended support for defense operations.☆16Updated last year
- This is a repo for fetching Applocker event log by parsing the win-event log☆31Updated 2 years ago
- Collection of generic YARA rules☆16Updated 11 months ago
- Hashes of infamous malware☆26Updated last year
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- CLI Search for Security Operators of MITRE ATT&CK URLs☆16Updated 2 years ago
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆18Updated 3 years ago
- ☆12Updated 2 years ago
- Ransomware Simulator for Blue team ,Ransomware Simulator for Red team ,Ransomware infographic, open source Anti Ransomware, Ransomware As…☆35Updated 3 years ago
- Hundred Days of Yara Challenge☆12Updated 2 years ago
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆15Updated 4 years ago
- WMI SA stuffs☆30Updated 3 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- Golang C2 Agent PoC utilizing web and social media paltforms to issue command and control and pasting results to PasteBin☆16Updated 5 years ago
- ☆22Updated last year