BruteRatel-DetectionTools
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
command-and-controldefensive-toolsincident-response+3
67
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
bartblaze/yara-rulesCollection of private Yara rules.
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
dr4k0nia/yara-rulesA collection of my yara rules
pandare9x/yara-rulesRepository of Yara Rules
embee-research/yara-detection-rulesYara Rules for Modern Malware
strangerealintel/orionA YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
nccgroup/yaml2yaraGenerate bulk YARA rules from YAML input
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
renat0z3r0/notepadpp-supply-chain-iocsIoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale…