
miniDumpReader
Parses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…

Parses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…

This repository contains an IDA processor for loading and disassembling compiled yara rules.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

Educational deep dive into Apple's built-in malware protection: signature databases, YARA rules, Gatekeeper integration, remediation binaries, and…

Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reachability…

0-day malware detection for binaries, source & scripts (that doesn't suck)

This is a little plugin to copy disassembly in a way that is usable in YARA rules!

IDA python plugin to scan binary with Yara rules

Use YARA rules on Time Travel Debugging traces

Java bytecode analyzer customizable via JSON rules