Alternatives and similar repositories for yara-rules

Users that are interested in yara-rules are comparing it to the libraries listed below

• codewatchorg / Burp-Yara-Rules
  Yara rules to be used with the Burp Yara-Scanner extension
  ☆49Updated 3 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 4 months ago
• Neo23x0 / exotron
  Sandbox feature upgrade with the help of wrapped samples
  ☆76Updated 7 years ago
• opensourcesec / CIRTKit
  Tools for the Computer Incident Response Team
  ☆147Updated 8 years ago
• idiom / pftriage
  Python tool and library to help analyze files during malware triage and analysis.
  ☆78Updated 5 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆110Updated 7 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆63Updated 10 years ago
• fugawi / mate
  Mitre Att&ck Technique Emulation
  ☆82Updated 6 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 4 years ago
• kevthehermit / YaraPcap
  Process HTTP Pcaps With YARA
  ☆108Updated 12 years ago
• IllusiveNetworks-Labs / HistoricProcessTree
  An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…
  ☆60Updated 7 years ago
• Neo23x0 / ImpHash-Generator
  PE Import Hash Generator
  ☆79Updated 8 years ago
• silascutler / MalPipe
  Malware/IOC ingestion and processing engine
  ☆107Updated 7 years ago
• advanced-threat-research / IOCs
  Repository containing IOCs, CSV and MISP JSON from our blogs
  ☆83Updated 4 years ago
• Security-Onion-Solutions / securityonion-elastic
  Security Onion Elastic Stack
  ☆46Updated 4 years ago
• phage-nz / infosec-bazaar
  A collection of infosec related scripts and information.
  ☆53Updated last year
• xenoscr / atomiccaldera
  A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…
  ☆73Updated 4 years ago
• CIRCL / yara-validator
  Validates yara rules and tries to repair the broken ones.
  ☆40Updated 5 years ago
• CERT-Polska / training-materials
  ☆52Updated 7 years ago
• kevthehermit / YaraManager
  Web based Manager for Yara Rules
  ☆58Updated 5 years ago
• JimmyAstle / Atomic-Parser
  Python parser for Red Canary's Atomic Red Team Yamls
  ☆27Updated 6 years ago
• bartblaze / MaTiRe
  Malware Analysis, Threat Intelligence and Reverse Engineering: LABS
  ☆82Updated 4 years ago
• sroberts / jager
  Hunting IOCs all day every day...
  ☆86Updated 2 years ago
• DissectMalware / base64_substring
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆40Updated 7 years ago
• mitre-attack / attack-evals
  ATT&CK Evaluations website (DEPRECATED)
  ☆61Updated 4 years ago
• EC-DIGIT-CSIRC / VirusTotal-Tools
  ☆37Updated 8 years ago
• pmelson / viper-scripts
  Various Modules & Scripts for use with Viper Framework
  ☆27Updated 6 years ago
• nheijmans / malzoo
  Mass static malware analysis tool
  ☆95Updated 3 years ago
• Cyb3rPandaH / Tableau-ATTCK
  Understanding ATT&CK Matrix for Enterprise
  ☆81Updated 7 years ago
• RamadhanAmizudin / python-icap-yara
  An ICAP Server with yara scanner for URL and content.
  ☆59Updated 11 months ago