fibratus
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
defensive-toolsforensicsincident-response+3
2.5k1 day ago
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
xacone/bestedrofthemarketOpen-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
bartblaze/yara-rulesCollection of private Yara rules.
mpast/mobileauditDjango application that performs SAST and Malware Analysis for Android APKs
target/halogenAutomatically create YARA rules from malicious documents.
oalabs/findyara-idaIDA python plugin to scan binary with Yara rules
neo23x0/yara-performance-guidelinesA guide on how to write fast and memory friendly YARA rules
pandare9x/yara-rulesRepository of Yara Rules
strangerealintel/orionA YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
neo23x0/yaraqaYARA rule analyzer to improve rule quality and performance
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
airbus-cert/yara-ttdUse YARA rules on Time Travel Debugging traces
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
100daysofyara/2024Rules shared by the community from 100 Days of YARA 2024