Yara Rules

YARAC

A pattern-matching tool for malware researchers to identify and classify malware samples using custom rules.

Yara rulesYARA

A comprehensive collection of Yara rules for malware detection, vulnerability identification, and security analysis.

Awesome YARA

A curated list of awesome YARA rules, tools, and resources for malware researchers and security professionals.

LOKIPython

A simple IOC and YARA scanner for detecting malware and security threats via file names, hashes, YARA rules, and C2 connections.

FireEye's Red Team Tool CountermeasuresYARA

Snort and YARA rules to detect attacks using FireEye's red team tools, released after their 2020 breach disclosure.

Elastic Yara SignaturesYARA

Open-source detection logic (rules, YARA, ransomware protection) for Elastic Security's endpoint protection platform.

Elastic Endpoint Behavioral RulesYARA

Open-source detection logic (rules, YARA, EQL) for Elastic Security's endpoint protection against malware, ransomware, and advanced threats.

RaccineC++

A Windows tool that intercepts and kills ransomware processes attempting to delete shadow copies via vssadmin and other system utilities.

HaboMalHunterPython

An automated malware analysis tool for Linux ELF files, extracting static and dynamic features for security assessment.

FireEye's Sunburst CountermeasuresYARA

Open-source detection rules for identifying SolarWinds SunBurst backdoor activities and related vulnerabilities across multiple security tools.

VolUtilityPython

A web interface for the Volatility memory forensics framework that runs plugins, stores results in MongoDB, and enables cross-plugin search.