YARA
ToolOpen-source projects built with YARA
There are currently 19 open-source projects built with YARA, with a combined total of 23.2k GitHub stars. The most common language among these projects is Python.
Showing 19 open-source projects
A comprehensive collection of Yara rules for malware detection, vulnerability identification, and security analysis.
A simple IOC and YARA scanner for detecting malware and security threats via file names, hashes, YARA rules, and C2 connections.
An advanced malware sandbox for automated configuration and payload extraction with dynamic unpacking and anti-evasion capabilities.
Identifies compilers, packers, obfuscators, and other characteristics in Android APK and DEX files.
A Windows security tool for real-time adversary tradecraft detection, memory scanning, and forensics via behavior-driven rules.
A static analyzer for PE executables that identifies malicious indicators and aids in malware assessment.
A Windows tool that intercepts and kills ransomware processes attempting to delete shadow copies via vssadmin and other system utilities.
An automatic, platform-independent unpacker for Windows binaries using emulation to analyze packed malware.
An automated malware analysis tool for Linux ELF files, extracting static and dynamic features for security assessment.
A scalable, modular object scanner and intrusion detection system that extracts, flags, and enriches files with metadata.
A Windows Batch and Unix Bash script suite for comprehensive host forensic data collection during incident response.
A modular, recursive file scanning framework that extends Yara signatures to extract and analyze file objects for malware analysis and intelligence.
A web-based interface for the Volatility memory forensics framework, enabling browser-based analysis of RAM dumps.
A lightweight incident response tool for rapid suspicious file discovery during threat hunting and forensic triage.
A Windows malware unpacker using Intel PIN for dynamic binary instrumentation and Scylla for import reconstruction.
A simple, self-contained modular host-based IOC scanner built around the YARA pattern matching engine.
A simple framework to extract actionable data like C&C servers and phone numbers from Android malware samples.
A Python tool that extracts HTTP streams from PCAP files and scans them with YARA rules for security analysis.
A plugin-based malware crawler for collecting and pre-analyzing malware samples, useful for antivirus testing and malware analysis.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.