Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloaders and maldocs.
☆17Jun 26, 2026Updated last month
Alternatives and similar repositories for yara
Users that are interested in yara are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malici…☆31Nov 1, 2025Updated 9 months ago
- YARA duplicate rule detection and removal. YARA rule index creation. YARA rule file merger.☆10Jan 19, 2026Updated 6 months ago
- This repository regroups the Yara Rules for the Unprotect Project☆26Nov 19, 2020Updated 5 years ago
- World's First Haiku Ransomware/Malware☆16Dec 22, 2024Updated last year
- generate yara-androguard report on your local and scan☆12Oct 3, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆14May 22, 2024Updated 2 years ago
- yara detection rules for hunting with the threathunting-keywords project☆166May 11, 2025Updated last year
- Collection of YARA rules designed for usage through VirusTotal.com.☆89Apr 4, 2024Updated 2 years ago
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 4 months ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated 10 months ago
- Detection rules and threat hunting queries in Defender XDR and Azure Sentinel☆17Mar 13, 2026Updated 4 months ago
- Collection of rules created using YARA-Signator over Malpedia☆147May 18, 2026Updated 2 months ago
- A collection of my public YARA signatures for various malware families☆30Sep 20, 2024Updated last year
- GDI malware made by Itzsten, for educational purposes only☆13Jul 4, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- Some YARA rules i will add from time to time☆69Mar 25, 2023Updated 3 years ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 8 months ago
- Repository of Yara rules created by the Stratosphere team☆29Jul 8, 2021Updated 5 years ago
- Short deep dive into Threat Hunting on AWS☆19Oct 15, 2023Updated 2 years ago
- A console text editor written in C.☆45Jan 4, 2026Updated 7 months ago
- Collection of YARA signatures from individual research☆45Nov 20, 2023Updated 2 years ago
- A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.☆18Sep 10, 2023Updated 2 years ago
- C2 Active Scanner☆59Jun 19, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- [Moved to Codeberg] Tools for inspecting YARA bytecode☆22Jul 1, 2020Updated 6 years ago
- ☆21May 28, 2026Updated 2 months ago
- Hunt the windows Registry automatically using VQL☆18Updated this week
- Open KLara Project☆37May 18, 2026Updated 2 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆60Mar 2, 2025Updated last year
- Alternative password shadowing scheme☆10Aug 1, 2026Updated last week
- ☆11Feb 9, 2023Updated 3 years ago
- This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…☆26Oct 3, 2023Updated 2 years ago
- Collect AWS logs and query them instantly with SQL! Open source CLI. No DB required.☆16Jul 24, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Typer text editor featured in "Millennium Computing" Win32/C video tutorials☆31Sep 1, 2019Updated 6 years ago
- ☆18Oct 13, 2025Updated 9 months ago
- Public datasets of malware and benign executable files (Windows EXE files). The dataset can be used by cybersecurity researchers focusing…☆28Jul 25, 2023Updated 3 years ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- Work In Progress☆10Jul 10, 2024Updated 2 years ago
- Repository of yara rules☆60Nov 29, 2022Updated 3 years ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago