How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
YARA signature and IOC database for my scanners and tools
The main features of neo23x0/signature-base are: Yara Rule Collections, Signature Rules, Threat Intelligence Feeds.
Projects with overlapping indexed features include: yara-rules/rules — This project is a community-curated repository of YARA rules used to detect malware, webshells, and other malicious… eset/malware-ioc — Indicators of Compromises (IOC) of our various investigations. neo23x0/loki — Loki is an endpoint detection tool, forensic artifact analyzer, and threat intelligence scanner. It functions as a… advanced-threat-research/yara-rules — Repository of YARA rules made by Trellix ATR Team. anyrun/yara — Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware… alienvault-labs/alienvaultlabs — Alienvault Labs Projects Random Stuff.
This project is a community-curated repository of YARA rules used to detect malware, webshells, and other malicious patterns in files. It serves as a dataset of signatures for identifying known malware families, software packers, and threat intelligence indicators. The collection provides specialized detection capabilities for identifying exploit kits and anti-analysis evasion techniques, such as anti-debugging and anti-virtualization methods. It also includes signatures for cryptographic algorithm detection and the identification of unauthorized remote administration tools on servers. The r
Indicators of Compromises (IOC) of our various investigations
Loki is an endpoint detection tool, forensic artifact analyzer, and threat intelligence scanner. It functions as a YARA-based indicator of compromise scanner designed to identify malicious persistence mechanisms, web shells, and unauthorized administration tools across local and remote systems. The project distinguishes itself by integrating multi-source threat intelligence, allowing for the loading of custom signature sets and encrypted indicators. It combines hash-based artifact detection with YARA rule execution to scan files, process memory, and registry hives for known malicious byte seq
Repository of YARA rules made by Trellix ATR Team