wolfvan / YaraRET
Carving tool based in Radare2 & Yara
☆16Updated 6 years ago
Alternatives and similar repositories for YaraRET
Users that are interested in YaraRET are comparing it to the libraries listed below
Sorting:
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Updated 8 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- A collection of tools adversaries commonly use in an attack.☆14Updated 5 months ago
- volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for insta…☆11Updated 6 years ago
- Repository of Information sharing on threats and indicators☆12Updated 5 years ago
- Check IOC provided by a MISP instance on Suricata events☆17Updated 5 years ago
- The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent☆12Updated 8 years ago
- Generic Signature Format for SIEM Systems☆14Updated 3 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- F-Secure Lightweight Acqusition for Incident Response (FLAIR)☆16Updated 3 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Updated last year
- NTFS file system specimens☆13Updated last year
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆16Updated last year
- Mass Triage Tools☆20Updated 2 months ago
- ☆12Updated 3 years ago
- Automated Static Analysis Framework☆9Updated 3 years ago
- A few quick recipes for those that do not have much time during the day☆22Updated 6 months ago
- ☆33Updated 3 years ago
- THOR MITRE ATT&CK Framework Coverage☆24Updated 4 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 7 years ago
- ☆12Updated 7 years ago
- Collection Of Scripts And Utilities For Windows Event Hunting☆18Updated 5 years ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Updated 3 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- ☆14Updated 6 years ago
- Old home of LimaCharlie, open source EDR☆30Updated last year
- Links to malware-related YARA rules☆15Updated 2 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆23Updated last year
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago