#
yara
Here are 160 public repositories matching this topic...
A curated list of awesome YARA rules, tools, and people.
ioc
awesome
awesome-list
threat-hunting
malware-analysis
malware-research
yara
yara-rules
malware-detection
yara-manager
yara-signatures
malware-rules
yara-scanner
awesome-yara
-
Updated
Dec 1, 2020
Signature base for my scanner tools
-
Updated
Dec 2, 2020 - YARA
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
-
Updated
Oct 27, 2020 - Python
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
android
machine-learning
antivirus
malware-analysis
malware-research
yara
packers
malware-detection
rasp
yara-forensics
android-protect-apps
android-protection
appshielding
-
Updated
Nov 20, 2020 - YARA
yarGen is a generator for YARA rules
-
Updated
Oct 12, 2020 - Python
DIE engine
entropy
reverse-engineering
signature
disassembler
elf
binary-analysis
program-analysis
yara
unpacker
-
Updated
Dec 8, 2020 - C++
Modular file scanning/analysis framework
python
linux
metadata
malware
python-script
antivirus
malware-analyzer
malware-analysis
malware-research
scanning
cuckoo
analytic-machines
analysis-framework
mount-point
yara
-
Updated
Oct 8, 2019 - Python
Extract and aggregate threat intelligence.
ioc
osint
dfir
threat-hunting
malware-research
misp
threat-sharing
threatintel
yara
threat-analysis
fraud-detection
intelligence-gathering
security-tools
threat-intelligence
soar
indicators-of-compromise
threat-feeds
threat-intelligence-platform
-
Updated
Nov 3, 2020 - Python
An open source framework for enterprise level automated analysis.
framework
malware-analyzer
malware-analysis
malware-research
automation-framework
yara
security-automation
malware-detection
-
Updated
Jul 27, 2020 - Python
Defanged Indicator of Compromise (IOC) Extractor.
ioc
library
osint
base64
decoding
dfir
malware-research
threat-sharing
threatintel
yara
threat-intelligence
defang
indicators-of-compromise
ioc-extractor
-
Updated
Jul 9, 2020 - Python
msm-code
commented
May 28, 2020
Environment information
- Mquery version (from the /status page): 1.2.0
- Ursadb version (from the /status page): 1.3.2+1125ee5
- Installation method:
- Generic docker-compose
- Dev docker-compose
- Native (from source)
- Other (please explain) k8s
Reproduction Steps
Start database compacting.
Run a query in just a right moment (ideallly a long running
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
-
Updated
Nov 8, 2020 - Python
ReversingLabs YARA Rules
reverse-engineering
yara
yara-rules
ransomware-prevention
malware-detection
ransomware-detection
indicators-of-compromise
yara-signatures
-
Updated
Dec 7, 2020 - YARA
docker
flask
static-analysis
reverse-engineering
malware
self-hosted
python3
malware-analysis
binary-analysis
self-hosting
malware-research
yara
virustotal
self-hosted-api
threat-intelligence
-
Updated
Dec 3, 2020 - YARA
Django web interface for managing Yara rules
rules
database
manager
metrics
corpus
registration
yara
yara-rules
guest-registration
yara-manager
yara-metrics
-
Updated
Jul 28, 2018 - Python
Parse YARA rules and operate over them more easily.
-
Updated
Nov 18, 2020 - Python
Yara rule making tool (IDA Pro & Binary Ninja Plugin)
-
Updated
Dec 7, 2020 - Python
simple YARA-based IOC scanner
-
Updated
Nov 17, 2020 - Go
Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
-
Updated
Mar 13, 2018 - Go
msm-code
commented
Apr 11, 2020
DbChange class is clearly used in ways it was not designed for.
The class definition:
enum class DbChangeType {
Insert = 1,
Drop = 2,
Reload = 3,
ToggleTaint = 4,
NewIterator = 5,
UpdateIterator = 6
};
class DBChange {
public:
DbChangeType type;
std::string obj_name;
std::string parameter;
DBChange(const DbChangeType &typeImprove this page
Add a description, image, and links to the yara topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the yara topic, visit your repo's landing page and select "manage topics."
Currently, we're not detecting a lot of @wireghoul's htaceess-based webshells. It would be nice to improve the situation :)