ProcFilter is a process filtering system for Windows with built-in YARA integration, designed for malware analysts to create YARA signatures for Windows environments.
#YARA tools
122 results · page 3
A project providing open-source YARA rules for malware and malicious file detection
A multithreaded YARA scanner for incident response or malware zoos.
A curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) for threat detection and malware identification.
A multi-platform open source tool for triaging suspect systems and hunting for Indicators of Compromise (IOCs) across thousands of endpoints.
Official repository of YARA rules for threat detection and hunting
A tool for signature analysis of RTF files to detect potentially unique parts and malicious documents.
A tool that generates Yara rules for strings and their XOR encoded versions, as well as base64-encoded variations with different padding possibilities.
YARA signature and IOC database for LOKI and THOR Lite scanners with high quality rules and IOCs.
A tool that generates Yara rules from training data using logistic regression and random forest classifiers.
A simple, self-contained modular host-based IOC scanner for incident responders.
A tool for deep analysis of malicious files using ClamAV and YARA rules, with features like scoring suspect files, building visual tree graphs, and extracting specific patterns.
A strings statistics calculator for YARA rules to aid malware research.
Repository of scripts, signatures, and IOCs related to various malware analysis topics.
A free, fast, and flexible multi-platform IOC and YARA scanner for Windows, Linux, and macOS.
Syntax, indent, and filetype detection for YARA rule files with auto-indenting and error display in quickfix window.
VolatilityBot automates binary extraction and memory analysis, including detecting code injections and strings.
Tool for managing Yara rules on VirusTotal
Yabin creates Yara signatures from malware to find similar samples.
A multi-threaded intrusion detection system using Yara for network and stream IDS
A low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques.
A tool for creating custom detection rules from YAML input
Tool for decompressing malware samples to run Yara rules against them.
A library for checking potentially malicious files and archives using YARA and making a decision about their harmfulness.
Load more tools
Showing 72 of 122