Open-source CTI workstation: org-aware threat intel, Sigma/YARA detection library, MITRE ATT&CK coverage and EDR rule export. - CyVeeru/ThreatLens

Vetted YARA and Sigma detection pack for AI-agent configs, instruction files, MCP servers, git hooks and macOS LaunchAgents. - theLightArchitect/larc-seraph

Weekly YARA rule bundle for BoadAIcleaner (permissively licensed YARA Forge sources) - contico232-ai/boadcleaner-yara-rules

Torvex is an open-source file scanning project written in Rust, featuring a command-line interface, desktop GUI, SHA-256 hashing, and YARA-X rule matching. It is in the very early stages of develop...

Simple YARA rule to scan for SolarMarker Indicators - ortizimo/solarmarker.yar

Simple YARA rule to scan for WaveBrowser Indicators - ortizimo/wavebrowser.yar

High-assurance Linux threat hunting, incident response, and compromise-assessment engine in Go with embedded YARA-X evaluation. - MR-N1CK/aether

A hands-on malware triage lab demonstrating YARA-based detection of synthetic downloader indicators through static string analysis, rule development, SHA-256 hashing, and positive and negative test...

A WPF .NET 8 desktop app for local static malware triage, file hashing, PE inspection, IOC extraction, offline YARA-lite rule matching, and simulated file reputation checks. - nktmnh/Nktmnh-protection

A WPF .NET 8 desktop app for local static malware triage, file hashing, PE inspection, IOC extraction, offline YARA-lite rule matching, and simulated file reputation checks. - nktmnh/-Cinderella-Pr...

Contribute to ADORSYS-GIS/wazuh-yara development by creating an account on GitHub.

Standalone endpoint detection and response. Process lineage, memory inspection, no external services. - SparklyBird/AetherEDR

Production DevSecOps CI/CD pipeline, multi-stage hardened Docker containerization, YARA vetting, Trivy CVE scanning, SPDX SBOM generation, and architectural whitepapers. - Ethan-da-Tech-Wizard/devs...

Production offline malware scanning and threat defense engine combining curated YARA rule compilation and ClamAV integration. - Ethan-da-Tech-Wizard/yara-threat-defense-engine

macOS hex editor with Kaitai Struct, YARA-X, scripting and a CLI - thomas-schreck/hexwerk

Static analysis of a Node.js infostealer distributed as 'Watch2Party Setup.exe': write-up, IOCs, YARA rule and js-confuser deobfuscation tools. No malware binary. - neverabsolute/wa...

Contribute to JJROD0722/yara-rule-development-and-validation development by creating an account on GitHub.

YARA 4.6 fork with the docscan module: weaponised document detection (remote template, Follina, DDE, VBA, embedded PE/LNK, RTF, PDF, LNK), disarm and a file watcher - rifatismailov/yara-docscan

A CI harness for YARA rule quality that lints rules, proves they fire on fixtures, scans goodware for false positives, profiles scan cost and diffs rule versions. - VirajVShetty/yaraci

Yara & Sigma-HTB Notes 14/15. Contribute to jeremyt12345/Yara-Sigma development by creating an account on GitHub.