Malware Detection

ConventionEngine is a Yara rule collection that analyzes PE files by examining PDB paths for suspicious keywords, terms, and anomalies that may indicate malicious software.

Yara rule generator using VirusTotal code similarity feature code-similar-to.

A project sharing malicious URLs used for malware distribution to help protect networks.

YaraHunter scans container images, running Docker containers, and filesystems using YARA rules to detect malware indicators and signs of compromise.

A repository of freely usable Yara rules for detection systems, with automated error detection workflows.

Binsequencer automatically generates YARA detection rules by analyzing collections of similar malware samples and identifying common x86 instruction sequences across the corpus.

A collection of Yara rules for detecting malware evasion techniques

AMDH is a Python3 Android security tool that automates mobile device hardening through malware detection, privacy protection, CIS benchmark compliance, and application security analysis.

A project providing open-source YARA rules for malware and malicious file detection

A repository of YARA rules for identifying and classifying malware through pattern-based detection.

Cloud-based virus scan APIs for securing files, URLs, and content uploads with advanced anti-virus and malware scanning capabilities.

Comprehensive suite for advanced file analysis and software supply chain security.

Malware scanning and removal tool with real-time protection capabilities

A Yara ruleset designed to detect PHP shells and other webserver malware for malware analysis and threat detection.

Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.

A powerful tool for detecting and identifying malware using a rule-based system.

A free software that calculates the security ranking of Internet Service Providers to detect malicious activities.

A tool that generates Yara rules from training data using logistic regression and random forest classifiers.

A GNU Emacs editor mode that provides syntax highlighting, indentation, and language server integration for editing YARA rule files.

Collection of malware persistence information and techniques

A collection of YARA rules for public use, built from intelligence profiles and file work.

GCTI's open-source detection signatures for malware and threat detection

YARA rules for ProcFilter to detect malware and threats

VxSig is a Google-developed tool that automatically generates antivirus byte signatures from similar binaries for Yara and ClamAV detection engines.