Autonomous DFIR agent for SIFT - cited findings, audited actions, zero hallucinated evil. - prabhakaran-jm/verdict

Triển khai hệ thống SIEM bằng Wazuh nhằm phát hiện, và ứng phó với các mối đe dọa an ninh mạng. Hệ thống tích hợp Suricata và Yara để giám sát tính toàn vẹn của tệp, phát hiện và tự động ngăn chặn...

Memory forensics automation — process analysis, injection detection, YARA scanning, IOC extraction with STIX 2.1 export. Works standalone or with Volatility3. - joemunene-by/ghostforensics

Thor Firewall Smart — Production-grade eBPF/XDP security: XDP/eBPF, dashmap, flume, axum, YARA, Sigma, ONNX ML inference, SOAR engine, WebSocket real-time dashboard - mhmsdfhwhegggggggg/Thor-Firewa...

incident response toolkit. Parses Microsoft UAL, forensic artifacts, creates YARA rules from files, and scans directories with YARA rules - battleroomforensics/irtoolkit

Mini EDR (Endpoint Detection and Response) - YARA-based static scanner & real-time file monitor - TL-cg11/miniedr

costrict-plugins mirror of trailofbits-trailofbits-yara-authoring (auto-generated, do not edit) - costrict-plugins-repo/trailofbits-trailofbits-yara-authoring

Hands-on malware analysis project covering hashing, strings, PE structure, behavioral analysis and YARA rules - Amalzalu/malware-analysis-challenge

Repository of Yara rules dedicated to Phishing Kits Zip files - t4d/PhishingKit-Yara-Rules

YARA rules for malware pattern matching — suspicious strings, high entropy, and UPX packing detection - DevSecLawrence/yara-rules-collection

MCP server for authoring YARA rules from binary samples: distinctive feature extraction, candidate ranking, rule emissio - Heretek-RE/re-yara-author

Malware analysis of Quasar RAT using VirusTotal, Yara rules, Python scriptS - nasibrahim/Quasar-analysis-project

YARA malware-detection rules + desktop scanner. Vetted rules tuned for vetting software downloads (crypto-miners, info-stealers, Discord token grabbers, Defender-tampering installers), plus a commu...

Production-ready detection content for SOC operations. Sigma rules, Splunk SPL, KQL, YARA signatures, and ATT&CK-mapped detection strategies. - Jaysolex/Detection-Content

A comprehensive collection of YARA rules and analysis tools for malware detection and threat intelligence - DeCyberGuardian/malware-analysis

Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professiona...

Generate candidate YARA rules from sample files/strings - cognis-digital/yaragen

Run simple YARA-style string/regex rules over a directory - cognis-digital/yararun

Production-ready Chainsaw SIEM-less threat hunting with Sigma and YARA detection rules for Windows attack chains. 8 Sigma rules + 2 YARA rules with 95% accuracy and complete incident response playb...

nix flake combining yara + signature-base. Contribute to karpfediem/yara-sigs development by creating an account on GitHub.