Malware Detection

YaraHunter scans container images, running Docker containers, and filesystems using YARA rules to detect malware indicators and signs of compromise.

A repository of freely usable Yara rules for detection systems, with automated error detection workflows.

Binsequencer automatically generates YARA detection rules by analyzing collections of similar malware samples and identifying common x86 instruction sequences across the corpus.

A collection of Yara rules for detecting malware evasion techniques

AMDH is a Python3 Android security tool that automates mobile device hardening through malware detection, privacy protection, CIS benchmark compliance, and application security analysis.

A project providing open-source YARA rules for malware and malicious file detection

A repository of YARA rules for identifying and classifying malware through pattern-based detection.

Cloud-based virus scan APIs for securing files, URLs, and content uploads with advanced anti-virus and malware scanning capabilities.

Comprehensive suite for advanced file analysis and software supply chain security.

Malware scanning and removal tool with real-time protection capabilities

A Yara ruleset designed to detect PHP shells and other webserver malware for malware analysis and threat detection.

Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.

A powerful tool for detecting and identifying malware using a rule-based system.

A free software that calculates the security ranking of Internet Service Providers to detect malicious activities.

A tool that generates Yara rules from training data using logistic regression and random forest classifiers.

A GNU Emacs editor mode that provides syntax highlighting, indentation, and language server integration for editing YARA rule files.

Collection of malware persistence information and techniques

A collection of YARA rules for public use, built from intelligence profiles and file work.

GCTI's open-source detection signatures for malware and threat detection

YARA rules for ProcFilter to detect malware and threats

VxSig is a Google-developed tool that automatically generates antivirus byte signatures from similar binaries for Yara and ClamAV detection engines.

Ghost USB Honeypot emulates USB storage devices to detect and analyze malware that spreads via USB without requiring prior threat intelligence.

A technique to associate applications with TLS parameters for identifying malware and vulnerable applications.

ClamAV is an open-source antivirus engine that detects trojans, viruses, malware, and other malicious threats.