Alternatives and similar repositories for yara_zip_module

Users that are interested in yara_zip_module are comparing it to the libraries listed below

• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆166Updated 3 years ago
• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆37Updated 2 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 5 years ago
• mandiant / apooxml
  Generate YARA rules for OOXML documents.
  ☆38Updated 2 years ago
• c3rb3ru5d3d53c / mwcfg-modules
  Malware Configuration Extraction Modules
  ☆51Updated 2 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 5 years ago
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆71Updated 6 years ago
• arieljt / VTCodeSimilarity-YaraGen
  ☆97Updated 5 years ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated 2 years ago
• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆80Updated 4 years ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 3 years ago
• godaddy / yara-rules
  YARA rules for use with ProcFilter
  ☆89Updated 8 years ago
• d00rt / emotet_network_protocol
  ☆84Updated 5 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆142Updated 3 years ago
• kirk-sayre-work / VBASeismograph
  A tool for detecting VBA stomping.
  ☆101Updated 3 years ago
• CAPESandbox / community
  Community modules for CAPE Sandbox
  ☆108Updated last week
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆96Updated 2 years ago
• silence-is-best / c2db
  c2 traffic
  ☆193Updated 2 years ago
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆26Updated 3 years ago
• mlodic / ursnif_beacon_decryptor
  Ursnif beacon decryptor
  ☆27Updated 2 years ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆98Updated 2 years ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆169Updated 4 months ago
• sysopfb / malware_decoders
  Static based decoders for malware samples
  ☆94Updated 5 years ago
• jonny-jhnson / Detecting-Process-Injection-Techniques
  This is a repository that is meant to hold detections for various process injection techniques.
  ☆34Updated 5 years ago
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆87Updated 6 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆215Updated 6 years ago
• libyal / winevt-kb
  Windows Event Log Knowledge Base
  ☆29Updated 3 weeks ago
• reb311ion / CapaExplorer
  Capa analysis importer for Ghidra.
  ☆63Updated 5 years ago
• pan-unit42 / dotnetfile
  ☆111Updated 4 months ago
• jeFF0Falltrades / YARA-Signatures
  A collection of my public YARA signatures for various malware families
  ☆30Updated last year