mikesxrs / Open Source Yara Rules

Detect potentially malicious PHP files

Tools for hunting for threats.

Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

CLI tool to analyze PE files

IOC from articles, tweets for archives

Signature base for my scanner tools

Sophos-originated indicators-of-compromise from published reports

Trigram database written in C++, suited for malware indexing

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

Parse YARA rules and operate over them more easily.

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Django web interface for managing Yara rules

Various Yara signatures (possibly to be included in a release later).

A curated list of awesome YARA rules, tools, and people.

APT & CyberCriminal Campaign Collection

Loki - Simple IOC and Incident Response Scanner

WALKOFF-enabled applications. #nsacyber