3 dépôts
Lightweight tools for scanning systems for Indicators of Compromise.
Explore 3 awesome GitHub repositories matching part of an awesome list · Scanner Tools. Refine with filters or upvote what's useful.
Loki is an endpoint detection tool, forensic artifact analyzer, and threat intelligence scanner. It functions as a YARA-based indicator of compromise scanner designed to identify malicious persistence mechanisms, web shells, and unauthorized administration tools across local and remote systems. The project distinguishes itself by integrating multi-source threat intelligence, allowing for the loading of custom signature sets and encrypted indicators. It combines hash-based artifact detection with YARA rule execution to scan files, process memory, and registry hives for known malicious byte seq
Endpoint scanner using YARA rules and other indicators.
Simple Bash IOC Scanner
Bash-based IOC scanner for Linux and Unix systems.
simple YARA-based IOC scanner
Go-based IOC scanner utilizing YARA rules.