Coder Social home page Coder Social logo

awesome-yara's Introduction

Awesome YARA

A curated list of awesome YARA rules, tools, and resources. Inspired by awesome-python and awesome-php.

Awesome

Rules

Tools

  • AirBnB BinaryAlert - BinaryAlert is an open-source serverless AWS pipeline where any file uploaded to an S3 bucket is immediately scanned with a configurable set of YARA rules. An alert will fire as soon as any match is found, giving an incident response team the ability to quickly contain the threat before it spreads.
  • findcrypt-yara - IDA pro plugin to find crypto constants (and more).
  • InQuest ThreatKB - Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL).
  • Laika BOSS - Laika is an object scanner and intrusion detection system that strives to achieve the following goals: Scalable, Flexible, Verbose. (whitepaper)
  • MITRE MultiScanner - MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built python scripts, web APIs, software running on another machine, etc.
  • OCYara - The OCyara module performs OCR (Optical Character Recognition) on image files and scans them for matches to YARA rules. OCyara also can process images embedded in PDF files.
  • PasteHunter - Scan pastebin.com with YARA rules.
  • ProcFilter - Helps create YARA signatures that protect Windows environments against a specific threat.
  • stoQ - A modular and highly customizable framework for the creation of data sets from multiple disparate data sources.
  • yabin - Creates YARA signatures from executable code within malware.
  • YaraGuardian - Django web inerface for managing YARA rules.
  • YaraManager - Web based Manager for YARA Rules.
  • Yara-Scanner - A Python-based extension that integrates a YARA scanner into Burp Suite. Yara-Scanner allows you perform on-demand YARA scans of websites within the Burp interface, based on custom YARA rules that you write or obtain.
  • Yara Python ICAP Server - An ICAP server with YARA scanner.
  • Yara-Validator - Validates YARA rules and tries to repair the broken ones.
  • yarGen - A YARA rule generator for finding related samples and hunting.
  • Yeti - Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository.
  • yextend - YARA integrated software to handle archive file data.

People

Related Awesome Lists

Contributing

Pull requests and issues with suggestions are welcome! Please try to keep your changes cleanly formatted and alphabetized. By submitting a PR you agree to release your contributions under the terms of the LICENSE.

awesome-yara's People

Contributors

rshipp avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.