fibratus
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
defensive-toolsforensicsincident-response+3
2.5k1 day ago
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
pandare9x/yara-rulesRepository of Yara Rules
threatray/threat-researchIoCs and YARA rules from Threatray's Threat Research
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
ahmed-tarek22752/rce-cve-2017-0199-detection-analysisThis repository contains a full blue-team malware analysis of a real malicious DOCX exploiting CVE-2017-0199. The lab includes sandbox execution,…
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
mpast/mobileauditDjango application that performs SAST and Malware Analysis for Android APKs
seifreed/yaraastA powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation
teycir/skillsguardStatic security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.
xacone/bestedrofthemarketOpen-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…
neo23x0/yaraqaYARA rule analyzer to improve rule quality and performance
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
momenbasel/malware-checkStatic and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations
100daysofyara/2026Rules shared by the community from 100 Days of YARA 2026
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
splintersfury/autopiffSemantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reachability…
squiblydoo/100daysofyaraRules shared by the community from 100 Days of YARA 2026