The pattern matching swiss knife
Repository Index
47,133 repositories indexed
1–24 of 28 · Most stars
Repository of yara rules
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
DIE engine
- signature
- reverse-engineering
- unpacker
- yara
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
Security sensor for realtime threat detection and protection
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
Elastic Security detection content for Endpoint
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
A static analyzer for PE executables.
- malware
- static
- analysis
- pe
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Collection of example YARA-L rules for use within Google Security Operations
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
The pattern matching swiss knife
Process HTTP Pcaps With YARA
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir