86,076 visible repositories in the index
1–17 of 17 · Most stars
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
Loki - Simple IOC and YARA Scanner
yarGen is a generator for YARA rules
IDA pro plugin to find crypto constants (and more)
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Extract and aggregate threat intelligence.
Modular file scanning/analysis framework
Defanged Indicator of Compromise (IOC) Extractor.
Collection of example YARA-L rules for use within Google Security Operations
File Scanning Framework
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
Process HTTP Pcaps With YARA
An ICAP Server with yara scanner for URL and content.
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
Yet another implementation of PEiD with yara-python
Simple tool to find the yara matches on a file