The pattern matching swiss knife
Repository Index
86,076 visible repositories in the index
1–24 of 27 · Most stars
Repository of yara rules
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
YARA signature and IOC database for my scanners and tools
- signature
- yara-rules
- ioc
- scanner
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
Security sensor for realtime threat detection and protection
All-in-One malware analysis tool.
- linux
- malware-analysis
- python3
- static-analysis
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
- bash
- clamav
- inotify
- intrusion-detection
Elastic Security detection content for Endpoint
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
- security
- yara
- serverless
- terraform
A static analyzer for PE executables.
- malware
- static
- analysis
- pe
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
The pattern matching swiss knife
Process HTTP Pcaps With YARA
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir