11 repositorios
Pattern matching rules for identifying malware and malicious files.
Explore 11 awesome GitHub repositories matching part of an awesome list · Malware Detection Rules. Refine with filters or upvote what's useful.
YARA is a pattern matching engine and binary analysis tool used to identify and classify malware samples. It functions as a malware research framework that allows for the definition of file descriptions and detection rules to find indicators of compromise within binaries. The system enables the creation of custom detection rules using strings, wildcards, and regular expressions. These rules use boolean logic to match textual or binary patterns, allowing for the classification of files into specific malware families and the automation of threat intelligence. The engine utilizes Aho-Corasick s
Identifies known malware families by matching files against specific textual and binary patterns.
This project is a community-curated repository of YARA rules used to detect malware, webshells, and other malicious patterns in files. It serves as a dataset of signatures for identifying known malware families, software packers, and threat intelligence indicators. The collection provides specialized detection capabilities for identifying exploit kits and anti-analysis evasion techniques, such as anti-debugging and anti-virtualization methods. It also includes signatures for cryptographic algorithm detection and the identification of unauthorized remote administration tools on servers. The r
Comprehensive repository of rules for malware identification.
ReversingLabs YARA Rules
Professional-grade rules for identifying malicious file characteristics.
Repository of YARA rules made by Trellix ATR Team
Security research-grade rules for identifying malicious threats.
A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
Community-shared rules for identifying malicious file patterns.
Yara rules for malware families seen as part of targeted threats project
Specific rules for identifying malware used in targeted attacks.
Various Yara signatures (possibly to be included in a release later).
Signatures for identifying various malicious file types.
My Yara Rules Collection
Personal collection of rules for malware detection.
YaraRules
Rules for detecting compilers, packers, and protectors in files.