Repository of tools, YARA rules, and code-snippets from Stairwell's research team.
☆24Jan 31, 2024Updated 2 years ago
Alternatives and similar repositories for threat-research
Users that are interested in threat-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python 3 library to build YARA rules.☆14Oct 24, 2021Updated 5 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- ☆24Dec 15, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- My collection of scripts for Ghidra (https://github.com/NationalSecurityAgency/ghidra)☆11Sep 13, 2020Updated 6 years ago
- function identification signatures☆12Apr 26, 2021Updated 5 years ago
- ☆11Jun 18, 2024Updated 2 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- ☆10Sep 13, 2022Updated 4 years ago
- YARI is an interactive debugger for YARA Language.☆91Sep 10, 2025Updated last year
- ☆16Sep 26, 2022Updated 4 years ago
- Generate YARA rules from Windows API hashes for malware detection and hunting.☆17Aug 11, 2026Updated 2 months ago
- ☆13Jan 26, 2026Updated 9 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆13Feb 5, 2025Updated last year
- AIL project training materials☆40Oct 22, 2026Updated 2 weeks ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- A collection of shellcode hashes☆17Aug 15, 2018Updated 8 years ago
- Local Transform Wrapper for Maltego☆11May 24, 2016Updated 10 years ago
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated last year
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Transform EQL detection rules to VQL artifacts☆12Nov 12, 2021Updated 4 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Jan 18, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆46Jan 31, 2025Updated last year
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- ☆12Oct 29, 2026Updated last week
- Rules Shared by the Community from 100 Days of YARA 2023☆79Apr 12, 2023Updated 3 years ago
- ☆16Apr 30, 2024Updated 2 years ago
- Splunk integration with MISP☆11Apr 14, 2018Updated 8 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆142Nov 19, 2023Updated 2 years ago
- simple scripts which fetch CIDR blocks by country code and add them to iptables/ipset blocklists☆11Dec 2, 2025Updated 11 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Very loud vBulletin exploit☆14Aug 12, 2020Updated 6 years ago
- Easily scan with multiple yara rules from different sources.☆14Mar 9, 2024Updated 2 years ago
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- A 'Universal WHOIS' proxy server - you query it, it gives back the correct details☆11Mar 22, 2026Updated 7 months ago
- Can you pay the ransom in your country?☆14Dec 18, 2023Updated 2 years ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 6 years ago