59 مستودعات
Awesome GitHub RepositoriesYara Rule Collections
Curated repositories containing YARA signatures for malware detection and threat hunting.
Explore 59 awesome GitHub repositories matching part of an awesome list · Yara Rule Collections. Refine with filters or upvote what's useful.
Awesome Yara Rule Collections GitHub Repositories
اعثر على أفضل المستودعات باستخدام الذكاء الاصطناعي.سنبحث عن أفضل المستودعات المطابقة باستخدام الذكاء الاصطناعي.
- yara-rules/rules
Yara-Rules/rules
4,712عرض على GitHubThis project is a community-curated repository of YARA rules used to detect malware, webshells, and other malicious patterns in files. It serves as a dataset of signatures for identifying known malware families, software packers, and threat intelligence indicators. The collection provides specialized detection capabilities for identifying exploit kits and anti-analysis evasion techniques, such as anti-debugging and anti-virtualization methods. It also includes signatures for cryptographic algorithm detection and the identification of unauthorized remote administration tools on servers. The r
Large, community-maintained collection of rules.
YARA - kevoreilly/capev2
kevoreilly/CAPEv2
3,284عرض على GitHubMalware Configuration And Payload Extraction
Rules bundled with automated sandbox extraction tools.
Python - neo23x0/signature-base
Neo23x0/signature-base
2,975عرض على GitHubYARA signature and IOC database for my scanners and tools
Frequently updated collection of IOCs and detection rules.
YARA - didierstevens/didierstevenssuite
DidierStevens/DidierStevensSuite
2,498عرض على GitHubPlease no pull requests for this repository. Thanks!
Rules for inspecting malicious OLE, RTF, and PDF files.
Python - eset/malware-ioc
eset/malware-ioc
1,955عرض على GitHubIndicators of Compromises (IOC) of our various investigations
Rules derived from ESET threat intelligence.
YARA - elastic/protections-artifacts
elastic/protections-artifacts
1,441عرض على GitHubElastic Security detection content for Endpoint
Signature-based rules for endpoint protection.
YARA - airbnb/binaryalert
airbnb/binaryalert
1,450عرض على GitHubBinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Rules for detecting malicious files and ransomware.
Python - reversinglabs/reversinglabs-yara-rules
reversinglabs/reversinglabs-yara-rules
ReversingLabs YARA Rules
Rules covering exploits, ransomware, and trojans.
YARA - advanced-threat-research/yara-rules
advanced-threat-research/Yara-Rules
Repository of YARA rules made by Trellix ATR Team
Rules developed by threat research teams.
YARA - chronicle/gcti
chronicle/GCTI
This repository contains GCTI's open source detection signatures.
Signatures for CobaltStrike and Sliver frameworks.
YARA - alienvault-labs/alienvaultlabs
AlienVault-Labs/AlienVaultLabs
Alienvault Labs Projects Random Stuff
Signatures and tools from security researchers.
Python - nccgroup/cyber-defence
nccgroup/Cyber-Defence
Information released publicly by NCC Group's Cyber Incident Response Team
Signatures released by security consultancy teams.
Python - inquest/yara-rules
InQuest/yara-rules
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
Rules geared towards threat hunting on VirusTotal.
Python - bartblaze/yara-rules
bartblaze/Yara-rules
Collection of private Yara rules.
Personal collection of malware detection signatures.
YARA - supportintelligence/icewater
SupportIntelligence/Icewater
16,432 Free Yara rules created by
Automatically generated signatures from intelligence feeds.
YARA - mikesxrs/open-source-yara-rules
mikesxrs/Open-Source-YARA-rules
YARA Rules I come across on the internet
Aggregated collection of open-source detection rules.
YARA - volexity/threat-intel
volexity/threat-intel
Signatures and IoCs from public Volexity blog posts.
IOCs and rules from threat intelligence reports.
Python - strangerealintel/dailyioc
StrangerealIntel/DailyIOC
IOC from articles, tweets for archives
Regularly updated rules for fresh threats.
YARA - emersonelectricco/fsf
EmersonElectricCo/fsf
File Scanning Framework
Rules focused on file type identification.
Python - ditekshen/detection
ditekshen/detection
Detection in the form of Yara, Snort and ClamAV signatures.
Interrelated network and host detection rules.
YARA
