A curated list of awesome YARA rules, tools, and people.

Loki - Simple IOC and YARA Scanner

DIE engine

YARA signature and IOC database for my scanners and tools

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Indicators of Compromises (IOC) of our various investigations

yarGen is a generator for YARA rules

Detect potentially malicious PHP files

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

Real-time, container-based file scanning at enterprise scale

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.

Extract and aggregate threat intelligence.

ReversingLabs YARA Rules

Repository of YARA rules made by Trellix ATR Team

Modular file scanning/analysis framework

Defanged Indicator of Compromise (IOC) Extractor.

whohk，linux下一款强大的应急响应工具 在linux下的应急响应往往需要通过繁琐的命令行来查看各个点的情况，有的时候还需要做一些格式处理，这对于linux下命令不是很熟悉的人比较不友好。本工具将linux下应急响应中常用的一些操作给集合了起来，并处理成了较为友好的格式，只需要通过一个参数就能代替繁琐复杂的命令来实现对各个点的检查。