LOKI
A simple IOC and YARA scanner for detecting malware and security threats via file names, hashes, YARA rules, and C2 connections.
What is LOKI?
Loki is an open-source security scanner that detects Indicators of Compromise (IOCs) on computer systems. It uses multiple detection methods including YARA rules, hash matching, filename regex, and C2 connection checks to identify malware, rootkits, and other security threats. The tool is designed for quick deployment and scanning during security incidents.
Security analysts, incident responders, and forensic investigators who need a lightweight, portable tool for detecting known threats and IOCs on Windows, Linux, and macOS systems.
Developers choose Loki for its simplicity, multi-platform support, and comprehensive IOC detection capabilities without requiring complex setup. It's particularly valued for its extensible signature base and ability to run from removable media during incident response.
Overview
Loki - Simple IOC and YARA Scanner
Use Cases
Best For
- Rapid incident response scanning on potentially compromised systems
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
