The Top 52 Yara Open Source Projects

Awesome Open Source

Awesome Open Source

Combined Topics

The Top 52 Yara Open Source Projects

Categories > Security > Yara

The pattern matching swiss knife

Repository of yara rules

Apt_cybercriminal_campagin_collections ⭐1,808

APT & CyberCriminal Campaign Collection

Loki - Simple IOC and Incident Response Scanner

Php Malware Finder ⭐1,214

Detect potentially malicious PHP files

Awesome Yara ⭐1,111

A curated list of awesome YARA rules, tools, and people.

Signature Base ⭐1,027

Signature base for my scanner tools

Binaryalert ⭐1,020

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Malware Ioc ⭐790

Indicators of Compromises (IOC) of our various investigations

Didierstevenssuite ⭐724

Please no pull requests for this repository. Thanks!

yarGen is a generator for YARA rules

Manalyze ⭐635

A static analyzer for PE executables.

Ghidra_scripts ⭐624

Scripts for the Ghidra software reverse engineering suite.

Mitigating Web Shells ⭐597

Guidance for mitigation web shells. #nsacyber

Multiscanner ⭐472

Modular file scanning/analysis framework

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

Die Engine ⭐390

Threatingestor ⭐360

Extract and aggregate threat intelligence.

Real-time, container-based file scanning at enterprise scale

An open source framework for enterprise level automated analysis.

Yara Python ⭐320

The Python interface for YARA

Hamburglar ⭐317

Hamburglar -- collect useful information from urls, directories, and files

Icewater ⭐315

16,432 Free Yara rules created by

Python Iocextract ⭐262

Defanged Indicator of Compromise (IOC) Extractor.

YARA malware query accelerator (web frontend)

An open source script to perform malware static analysis on Portable Executable

Yara integrated software to handle archive file data.

Yara Rules ⭐184

Repository of YARA rules made by McAfee ATR Team

Open Source Yara Rules ⭐177

YARA Rules I come across on the internet

Yara Rules ⭐175

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

Go bindings for YARA

Malware Indicators ⭐168

Citizen Lab Malware Reports

Yaraguardian ⭐146

Django web interface for managing Yara rules

A malware analysis and classification tool.

Walkoff Apps ⭐114

WALKOFF-enabled applications. #nsacyber

Reversinglabs Yara Rules ⭐98

ReversingLabs YARA Rules

Parse YARA rules and operate over them more easily.

Yara Endpoint ⭐69

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

Trigram database written in C++, suited for malware indexing

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

A Web Malware Scanner

Balbuzard ⭐57

Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.

Various Yara signatures (possibly to be included in a release later).

CLI tool to analyze PE files

Real-time Packet Observation Tool

Binjadock ⭐33

An extendable, tabbed, dockable UI widget plugin for BinaryNinja https://binary.ninja.

Operation Wocao ⭐29

Operation Wocao - Indicators of Compromise

Offline Threat Intelligence Analyzer for extracting artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

Holmes Totem ⭐25

Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.

IoC's, PCRE's, YARA's etc

1-52 of 52 projects