Loki - Simple IOC and Incident Response Scanner

A curated list of awesome YARA rules, tools, and people.

Signature base for my scanner tools

Kaspersky's GReAT KLara

A collection of sources of indicators of compromise.

Personal compilation of APT malware from whitepaper releases, documents and own research

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

ReversingLabs YARA Rules

Django web interface for managing Yara rules

Parse YARA rules and operate over them more easily.

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

Set of Yara rules for finding files using magics headers

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

Random hunting ordiented yara rules

Performs OCR on image files and scans them for matches to YARA rules

Collection of private Yara rules.

Collection of YARA signatures from individual research

A tool to help malware analysts signature unique parts of RTF documents

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

IDA Processor for Compiled YARA Rules

Validates yara rules and tries to repair the broken ones.

Simple tool to find the yara matches on a file

YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.

A set of YARA rules for the AIL framework to detect leak or information disclosure

Scans Slack for API tokens, credentials, passwords, and more using YARA rules

Yet another implementation of PEiD with yara

A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.

Python 3 library to build YARA rules.

Lists of not-suitable-for-work words as YARA rules

Yara scan Phishing Kit's Zip archive(s)