yara-rules
inquest/yara-rulesCollection of YARA rules for hunting malware, malicious Office documents, and exploit artifacts, with references to samples and research write-ups.
curated-resourcesdefensive-toolsincident-response+5
389
inquest/yara-rulesCollection of YARA rules for hunting malware, malicious Office documents, and exploit artifacts, with references to samples and research write-ups.
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
embee-research/yara-detection-rulesYara Rules for Modern Malware
v-pun215/tourmalineReverse engineering notes, deobfuscated source, IOCs, and YARA rules for the Tourmaline ClickFix Python RAT, covering its DNS tunnel and blockchain…
dmitry-matvienko/malware-analysis-fake-hwmonitorTechnical analysis, writeup, and YARA rules for a DLL Sideloading campaign disguised as HWMonitor
bartimusprimed/cve-2021-1675-yaraYARA rules for detecting CVE-2021-1675 (PrintNightmare) exploitation attempts and related malware artifacts.
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
ahmetpayaslioglu/yararulesCurated collection of YARA detection rules for identifying and classifying malware, supporting threat hunting and detection workflows.
gyaansastra/cve-2022-30190Comprehensive analysis of CVE-2022-30190 (Follina MSDT vulnerability) with IOCs, detection rules for SIEMs/EDR, YARA signatures, mitigation scripts,…
mikesxrs/cve-2023-21716_yara_resultsResults of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar
rivitna/malwareCurated YARA rules and detection programs for identifying ransomware families, providing signature-based indicators for malware triage, threat…
strangerealintel/orionA YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
chronicle/gctiDetection signature repository providing YARA rules and threat-hunting content for identifying malware and malicious activity across enterprise…
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
corelight/quipuA desktop workbench for writing, validating, compiling, and testing YARA rules.
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
habibkaratas/sorry-ransomware-analysisSorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign
