111 repository-uri
Awesome GitHub RepositoriesDevelopment And Analysis Tools
Utilities for generating, managing, and integrating YARA rules into security workflows.
Explore 111 awesome GitHub repositories matching part of an awesome list · Development And Analysis Tools. Refine with filters or upvote what's useful.
Awesome Development And Analysis Tools GitHub Repositories
Găsește cele mai bune repo-uri cu AI.Vom căuta cele mai potrivite repository-uri folosind AI.
- misp/misp
MISP/MISP
6,360Vezi pe GitHubMISP is an open-source threat intelligence sharing platform designed for collecting, storing, and distributing structured threat indicators and intelligence. At its core, it provides a distributed synchronization protocol for transferring events between instances, an attribute-based correlation engine that links matching indicators across events, and a REST API with an OpenAPI specification for programmatic access to threat data. The platform uses formal data formats for JSON, taxonomy, galaxy, and object templates to enable compatibility across tools and communities. The platform distinguish
Threat intelligence platform with YARA support.
PHP - neo23x0/loki
Neo23x0/Loki
3,763Vezi pe GitHubLoki is an endpoint detection tool, forensic artifact analyzer, and threat intelligence scanner. It functions as a YARA-based indicator of compromise scanner designed to identify malicious persistence mechanisms, web shells, and unauthorized administration tools across local and remote systems. The project distinguishes itself by integrating multi-source threat intelligence, allowing for the loading of custom signature sets and encrypted indicators. It combines hash-based artifact detection with YARA rule execution to scan files, process memory, and registry hives for known malicious byte seq
Python-based IOC and YARA scanner.
Python - rednaga/apkid
rednaga/APKiD
2,518Vezi pe GitHubAndroid Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Android application identifier for packers and obfuscators.
YARA - yeti-platform/yeti
yeti-platform/yeti
1,996Vezi pe GitHubYour Everyday Threat Intelligence
Platform for organizing threat intelligence.
Python - neo23x0/yargen
Neo23x0/yarGen
1,796Vezi pe GitHubyarGen is a generator for YARA rules
Rule generator for finding related samples.
Python - polymorf/findcrypt-yara
polymorf/findcrypt-yara
1,721Vezi pe GitHubIDA pro plugin to find crypto constants (and more)
IDA Pro plugin for finding crypto constants.
Python - airbnb/binaryalert
airbnb/binaryalert
1,450Vezi pe GitHubBinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Serverless pipeline for automated file scanning.
Python - deepfence/yarahunter
deepfence/YaraHunter
1,320Vezi pe GitHub🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍
Cloud-native malware scanner for CI/CD.
Go - kevthehermit/pastehunter
kevthehermit/PasteHunter
1,136Vezi pe GitHubScanning pastebin with yara rules
Scanner for Pastebin using YARA rules.
Python - target/strelka
target/strelka
Real-time, container-based file scanning at enterprise scale
Detection-oriented file analysis system.
Python - inquest/threatingestor
InQuest/ThreatIngestor
Extract and aggregate threat intelligence.
Automated IOC and rule extraction tool.
Python - lmco/laikaboss
lmco/laikaboss
Laika BOSS: Object Scanning System
Scalable object scanner and intrusion detection system.
Python - kasperskylab/klara
KasperskyLab/klara
Kaspersky's GReAT KLara
Distributed system for scanning samples with rules.
PHP - chainguard-dev/bincapz
chainguard-dev/bincapz
#supply #chain #attack #detection
Tool for enumerating program capabilities via fragment analysis.
YARA - mitre/multiscanner
mitre/multiscanner
Modular file scanning/analysis framework
Framework for aggregating file analysis results.
Python - inquest/python-iocextract
InQuest/python-iocextract
Defanged Indicator of Compromise (IOC) Extractor.
Extractor for IOCs and YARA rules.
Python - jpcertcc/malconfscan
JPCERTCC/MalConfScan
Volatility plugin for extracts configuration data of known malware
Volatility plugin for extracting malware configuration.
Python - cert-polska/mquery
CERT-Polska/mquery
YARA malware query accelerator (web frontend)
Web frontend for fast YARA queries on datasets.
Python - comaeio/swishdbgext
comaeio/SwishDbgExt
Incident Response & Digital Forensics Debugging Extension
WinDbg extension for hunting processes in memory.
C++ - godaddy/procfilter
godaddy/procfilter
A YARA-integrated process denial framework for Windows
Process filtering system with YARA integration.
C++
