Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Repository Index
86,576 visible repositories in the index
25–41 of 41 · Most stars
Collection of example YARA-L rules for use within Google Security Operations
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
The pattern matching swiss knife
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
Process HTTP Pcaps With YARA
CryptoNet is simple, fast and a lightweight asymmetric and symmetric encryption library.
- rsa
- decryption
- csharp
- encryption
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir
Yet another implementation of PEiD with yara
- binary-analysis
- yara
- yara-rules
- peid
Threat Detection Rules (Snort/Sigma/Yara)
Yet another implementation of PEiD with yara-python
Simple tool to find the yara matches on a file
- yara
- yara-rules
- malware
- malware-analysis
Browser-less OAuth 2.0 App2App flow involving one or more Brokers