YARA module for supporting DCSO format bloom filters with hashlookup capabilities.
#YARA tools
122 results
Converts Sigma and Yara rules to CRYPTTECH's SIEM query language.
Integrates static APK analysis with Yara and requires re-compilation of Yara with the androguard module.
A tool to run YARA rules against node_module folders to identify suspicious scripts
A tool for malware analysts to search through base64-encoded samples and generate yara rules.
A serverless, real-time, and retroactive malware detection tool that scans files with YARA rules and alerts incident response teams.
Define and validate YARA rule metadata with CCCS YARA Specification.
A collection of YARA rules for public use, built from intelligence profiles and file work.
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
A collection of Yara rules for identifying malicious PEs with unique or suspicious PDB paths.
Automated framework for collecting and processing samples from VirusTotal with YARA rule integration.
A daily collection of IOCs from various sources, including articles and tweets.
A set of interrelated detection rules for improving detection and hunting visibility and context
Repository for detection content with various types of rules and payloads.
A .Net wrapper library for the native Yara library with interoperability and portability features.
Signature-based YARA rules for detecting and preventing threats within Linux, Windows, and macOS systems.
ELAT (Event Log Analysis Tool) is a tool that helps in analyzing Windows event logs for malware detection.
FARA is a repository of purposefully erroneous Yara rules for training security analysts.
IDA Pro plugin for finding crypto constants
FireEye Mandiant SunBurst Countermeasures: freely available rules for detecting malicious files and activity
A set of rules for detecting threats in various formats, including Snort, Yara, ClamAV, and HXIOC.
Forager is a threat intelligence tool that simplifies the retrieval, storage, and maintenance of threat data with a user-friendly interface and support for various data sources.
Go bindings for YARA with installation and build instructions.
YARA syntax highlighting for Gtk-based text editors
Showing 24 of 122