Alternatives and similar repositories for yara_zip_module

Users that are interested in yara_zip_module are comparing it to the libraries listed below

• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆37Updated 2 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆164Updated 3 years ago
• mandiant / apooxml
  Generate YARA rules for OOXML documents.
  ☆38Updated 2 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 5 years ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 2 years ago
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆71Updated 6 years ago
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 3 years ago
• c3rb3ru5d3d53c / mwcfg-modules
  Malware Configuration Extraction Modules
  ☆51Updated last year
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆158Updated 2 months ago
• silence-is-best / c2db
  c2 traffic
  ☆192Updated 2 years ago
• avast / yarang
  Alternative YARA scanning engine
  ☆73Updated 3 years ago
• g-les / floss2yar
  ☆15Updated 3 years ago
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆88Updated 8 years ago
• pan-unit42 / dotnetfile
  ☆110Updated 2 months ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated 2 years ago
• jonny-jhnson / Detecting-Process-Injection-Techniques
  This is a repository that is meant to hold detections for various process injection techniques.
  ☆34Updated 5 years ago
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆31Updated 5 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆142Updated 3 years ago
• reb311ion / CapaExplorer
  Capa analysis importer for Ghidra.
  ☆63Updated 4 years ago
• accidentalrebel / mbcscan
  Scans a malware file and lists down the related MBC (Malware Behavior Catalog) details.
  ☆22Updated 3 years ago
• d00rt / emotet_network_protocol
  ☆84Updated 5 years ago
• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆78Updated 3 years ago
• sysopfb / malware_decoders
  Static based decoders for malware samples
  ☆94Updated 5 years ago
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆87Updated 6 years ago
• arieljt / VTCodeSimilarity-YaraGen
  ☆97Updated 5 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆78Updated 11 years ago
• jonny-jhnson / Windows-API-To-Sysmon-Events
  A repository that maps API calls to Sysmon Event ID's.
  ☆122Updated 3 years ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆97Updated 2 years ago
• mlodic / ursnif_beacon_decryptor
  Ursnif beacon decryptor
  ☆27Updated 2 years ago