Automated malware analysis sandbox with custom YARA rule generation and dynamic PE execution tracking. - ericust1/automated-malware-sandbox-yara

A modular Python tool for Static Malware Analysis: PE Header Parsing, Shannon Entropy Calculation (Packer/Crypter detection), Suspicious Win32 API Identification, and YARA Rule Engine Integration. ...

Hands-on SOC threat hunting lab using YARA to detect malware indicators, wide strings, Base64 content, and XOR-obfuscated patterns in a Windows environment. Includes custom rule creation, recursive...

Automated PE header analysis, fuzzy hashing, and YARA rule generator for static malware triage - kelvinodarikpe88/malware-static-triage-pipeline

Contribute to kiryu-chan23/yara-rule-builder development by creating an account on GitHub.

Automated YARA rule generation from natural language using RAG pipelines and local LLMs - Abderrahmane381/yara-rag-intelligent-system

Claude Code-driven CVE-to-detection-rule pipeline (demo/enablement artifact) — grounded research, Sigma/YARA/Suricata rule generation, hook-based validation, Obsidian knowledge base - nkoziel/cve-t...

macOS ClickFix campaign tracking by Novum Analytica: IOCs, decoded chains, YARA/Sigma detections, safe payload capture tooling. - raimurokko/macos-threat-tracking

Lightweight open-source antivirus engine for Windows with YARA scanning, PE ML classifier, and kernel minifilter driver - mukti-sys/sentinel-antivirus

Windows-focused command-line YARA scanner with live progress, file-type/hash/PE enrichment, and a built-in YARA Forge rule updater. - PSubutai/yara-scan

rulec: one-way compiler lowering detection-rule dialects (YARA today, Sigma next) onto the vyre GPU rule engine; forward integration onto the vyre substrate with optional .srg text export. - santhr...

An advanced network packet analyzer and IDS with real-time sniffing, YARA rule scanning, and ML-based anomaly detection - ANIONAgithub/Packet-Sniffer-IDS

Bilingual YARA threat-hunting, rule-authoring, automation, and Arabic training studio. - bedochi1996/YARA-Hunter-Studio

Enterprise-grade File Upload Security Scanner built with Python, Flask, YARA, REST API, 2FA, and Security Analytics. - HackForgeX/securefile-scanner-enterprise

Fast, self-hosted DFIR triage for Windows Event Logs (.evtx): Sigma + YARA + heuristic detections, MITRE ATT&CK, attack chains, and one-click PDF/DOCX reports. - geezsecurity/Log-Triage

Modular malware detection platform with automatic YARA rule synchronization and rule-based file scanning. - Biswadebs-Lab/Argus

Malware analysis of a malicious PuTTY executable (Trojan.Dropper) that extracts a PowerFun PowerShell reverse shell. Includes IOCs, YARA rule, and full analysis report. - Stefan-Krijt/Putty_Patrol

Portable Windows x64 Rizin with Ghidra, jsdec, and RetDec decompilers, YARA scanning, and FLIRT signatures. - JerryLinLinLin/rizin-win64-bundle

Lightweight macOS persistence scanner + YARA pipeline (report-only, sample-safe) - tikket1/macscan