Open-source alternatives to CrowdFMS

Yara rule generator using VirusTotal code similarity feature code-similar-to:

Parsing of YARA rules into AST and building new rulesets in C++.

YARI is an interactive debugger for YARA Language.

YARA Language Server

Clojure YARA-style pattern matching - malware signatures, hex/ascii/regex patterns

Performs OCR on image files and scans them for matches to YARA rules

Repository that contains a set of purposefully erroneous Yara rules.

Yara integrated software to handle archive file data.

Python 3 tool to parse Yara rules (extension of yarabuilder)

IDA Processor for Compiled YARA Rules

YARA malware query accelerator (web frontend)

#supply #chain #attack #detection

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

Validates yara rules and tries to repair the broken ones.

Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.

Incident Response - Fast suspicious file finder

Incident Response & Digital Forensics Debugging Extension

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA

Create base64 or XOR encoded variations of a string (or list of strings for base64)

Scan files with Yara and send rule matches to VirusTotal reports as comments

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

⚡️ Fast and lightweight malware scanner written in go.

YaraDbg is a free web-based Yara debugger to help security analysts to write hunting or detection rules with less effort and more confidence. By using YaraDbg, you can perform a thorough root-cause-analysis (RCA) on why some of your Yara rules did or did not match with a specific file. It can…

Simple yara rule manager