Malware Detection

wazuhC++

An open-source unified XDR and SIEM platform for threat prevention, detection, and response across endpoints and cloud workloads.

Yara rulesYARA

A comprehensive collection of Yara rules for malware detection, vulnerability identification, and security analysis.

Awesome YARA

A curated list of awesome YARA rules, tools, and resources for malware researchers and security professionals.

LOKIPython

A simple IOC and YARA scanner for detecting malware and security threats via file names, hashes, YARA rules, and C2 connections.

APKiDYARA

Identifies compilers, packers, obfuscators, and other characteristics in Android APK and DEX files.

PersistenceSniperPowerShell

A PowerShell module for Blue Teams, Incident Responders, and System Administrators to hunt persistence techniques implanted in Windows machines.

OSXCollectorPython

A forensic evidence collection and analysis toolkit for macOS, gathering system data to detect and investigate malware infections.

JA4+Rust

A suite of network fingerprinting standards for TLS, TCP, HTTP, SSH, and other protocols to facilitate threat detection and security analysis.

Quark-EnginePython

An obfuscation-neglect Android malware scoring system that analyzes APKs for malicious behavior patterns.