Spyre
A simple, self-contained modular host-based IOC scanner built around the YARA pattern matching engine.
What is Spyre?
Spyre is a simple, self-contained host-based IOC scanner built around the YARA pattern matching engine. It allows incident responders to scan files, processes, and system artifacts for indicators of compromise using customizable YARA rules and other scan modules. The tool is designed for easy deployment and operationalization in security investigations.
Incident responders, security analysts, and forensic investigators who need a lightweight, deployable tool for scanning hosts for signs of compromise during security incidents.
Developers choose Spyre for its simplicity, modularity, and ease of deployment—it can be bundled with rule sets into a single binary, requires minimal dependencies, and is built specifically for operational use in incident response scenarios.
Overview
simple YARA-based IOC scanner
Use Cases
Best For
- Incident responders needing a quick-deploy IOC scanner
- Security teams conducting host-based forensic investigations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
