Search Results for "yara"
Sort By:
Showing 10 open source projects for "yara"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
1
YARA
The pattern matching swiss knife for malware researchers
...If you plan to use YARA to scan compressed files (.zip, .tar, etc) you should take a look at yextend, a very helpful extension to YARA developed and open-sourced by Bayshore Networks. -
2
DIE-engine
GUI & console sources for Detect It Easy(DiE)
...The project is designed for identifying file characteristics, signatures, packers, compilers, and other binary properties used during software analysis. Its source tree integrates components for disassembly, entropy analysis, signatures, YARA scanning, static unpacking, and multiple executable formats. Both graphical and command-line workflows are maintained so analysis can be performed interactively or incorporated into scripts. Build configurations cover Windows, Linux, and macOS along with several Linux package formats. The repository is useful both as part of Detect It Easy and as source material for developers studying binary-analysis tooling. -
3
GRR
GRR Rapid Response, remote live forensics for incident response
GRR Rapid Response is an incident response framework focused on remote live forensics. It consists of a python client (agent) that is installed on target systems, and python server infrastructure that can manage and talk to clients. The goal of GRR is to support forensics and investigations in a fast, scalable manner to allow analysts to quickly triage attacks and perform analysis remotely. GRR client is deployed on systems that one might want to investigate. On every such system, once... -
4
IntelOwl
Centralized platform for automated threat intelligence analysis
...The system features a modular architecture built around plugins that allow new analyzers, connectors, and integrations to be added easily. These plugins can collect data from external intelligence platforms or generate insights using internal analysis tools such as YARA or static malware analyzers. -
Cut Data Warehouse Costs by 54%BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.
-
5
Elkeid
Open source solution that can meet the requirements of workloads
Elkeid is an open-source platform for security and intrusion-detection that aims to support a wide variety of deployment contexts — from bare-metal hosts to containers, Kubernetes clusters, and even serverless environments. It was born out of ByteDance’s internal security best practices, offering for community users a subset of its enterprise-grade capabilities. Elkeid combines kernel-level data collection, user-space agents, and runtime instrumentation (RASP) to detect malicious behavior,... -
6
XPEViewer
PE file viewer/editor for Windows, Linux and MacOS
XPEViewer is a cross-platform viewer and editor for Microsoft Portable Executable files used by Windows applications. It is designed for developers, malware analysts, and reverse engineers who need to inspect executable structures in detail. The application combines PE parsing with tools for examining binary data, disassembly, symbols, regions, entropy, and memory layout. Integrated hexadecimal viewing and editing provide direct access to raw file contents. The project also incorporates... -
7
A professional PE (Portable Executable) analysis and modification tool for Windows executables and DLLs.
-
8
IDA Signsrch
IDA Pro plug-in of Luigi Auriemma's signsrch signature matching tool.
IDA Pro plug-in conversion of Luigi Auriemma's signsrch signature matching tool. * Deprecated, will no longer be updated, please see my use my superior YARA for IDA plugin here: https://github.com/kweatherman/yara4ida * July 2018, updated to IDA 7.1 Luigi's original signsrch description: "Tool for searching signatures inside files, extremely useful as help in reversing jobs like figuring or having an initial idea of what encryption/- compression algorithm is used for a proprietary protocol or file. ... -
9
HoneyDrive
Honeypots in a box! HoneyDrive is the premier honeypot bundle distro.
HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction honeypot, Glastopf web honeypot and Wordpot, Conpot SCADA/ICS honeypot, Thug and PhoneyC honeyclients and more. Additionally it includes many useful pre-configured scripts and utilities to... -
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
10
Yara is a fast, embeddable RSS aggregator and parser. It is written in C++ and exposes a very simple API in C.
- Previous
- You're on page 1
- Next