Open-source alternatives to Yara Rules

This repository contains GCTI's open source detection signatures.

Yara rules for malware families seen as part of targeted threats project

Yara rules to be used with the Burp Yara-Scanner extension

Public catalog of stealer log fingerprints. Banner strings, field signatures, sanitized samples, and YARA rules for 30+ malware families including RedLine, Vidar, Lumma, StealC, and Rhadamanthys. For incident response, detection engineering, and threat intelligence research.

A home for detection content developed by the delivr.to team

rules to identify files containing juicy information like usernames, passwords etc

Please no pull requests for this repository. Thanks!

Detection in the form of Yara, Snort and ClamAV signatures.

Elastic Security detection content for Endpoint

File Scanning Framework

Indicators of Compromises (IOC) of our various investigations

Some YARA rules i will add from time to time

A collection of curated YARA rules used as part of the Filescan.io service

This repository regroups the Yara Rules for the Unprotect Project

YARA rules for use with ProcFilter

Yara rules for detecting malware

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacker, Deobfuscator, Decompiler, website signatures, Ghidra, Suricata, Sigma, Kernel, Hypervisior based protection and much more than you can imagine.

Yara rules written by me, for free use.

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

A collection of my public YARA signatures for various malware families

A set of public Yara rules