immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
bartblaze/yara-rulesCollection of private Yara rules.
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
dr4k0nia/yara-rulesA collection of my yara rules
pandare9x/yara-rulesRepository of Yara Rules
embee-research/yara-detection-rulesYara Rules for Modern Malware
strangerealintel/orionA YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
sumidcyber/zeroscout🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…
malvuln/sigint-hombreDynamically generated Suricata rules from real-time threat feeds
hullabrian/eventhorizonTool that gathers a customizable set of ETW telemetry and generates user-defined detections
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
xacone/bestedrofthemarketOpen-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…