Alternatives and similar repositories for spyre

Users that are interested in spyre are comparing it to the libraries listed below

• target / halogen
  Automatically create YARA rules from malicious documents.
  ☆211Updated 3 years ago
• 0xrawsec / gene
  Signature engine for all your logs
  ☆173Updated 2 years ago
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆159Updated 8 months ago
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆79Updated 3 years ago
• 3CORESec / S2AN
  S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator
  ☆89Updated 2 years ago
• StrangerealIntel / DailyIOC
  IOC from articles, tweets for archives
  ☆319Updated last year
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆113Updated 6 months ago
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆83Updated this week
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆105Updated 3 weeks ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆62Updated last year
• pan-unit42 / playbook_viewer
  ☆175Updated last year
• hdm / jarm-go
  A Go implementation of JARM
  ☆119Updated 3 years ago
• Hestat / lw-yara
  Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
  ☆105Updated 4 years ago
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆135Updated last year
• botherder / kraken
  Cross-platform Yara scanner written in Go
  ☆327Updated 2 years ago
• kirk-sayre-work / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆96Updated 3 weeks ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆241Updated 4 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago
• endgameinc / eqllib
  ☆166Updated 4 years ago
• socprime / SigmaUI
  SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)
  ☆189Updated 4 years ago
• EmergingThreats / threatresearch
  Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
  ☆80Updated 2 months ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆265Updated 6 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆141Updated 5 years ago
• joesecurity / sigma-rules
  Sigma rules from Joe Security
  ☆226Updated last year
• silence-is-best / c2db
  c2 traffic
  ☆192Updated 2 years ago
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆173Updated last year
• cedowens / C2-JARM
  A list of JARM hashes for different ssl implementations used by some C2/red team tools.
  ☆144Updated 2 years ago
• intezer / yara-rules
  ☆128Updated 10 months ago
• mitre / stockpile
  A CALDERA plugin
  ☆79Updated last month
• andreafortuna / autotimeliner
  Automagically extract forensic timeline from volatile memory dump
  ☆132Updated last year