Signature Based Detection

Cyacomb

Digital forensics tools for detecting CSAM on devices and online platforms.

HarfangLab EPP Antivirus

EPP antivirus with signature-based and behavioral malware detection

Palo Alto Networks Advanced WildFire

Cloud-based malware prevention engine using ML and sandboxing for file threats

Trellix Intrusion Prevention System

Next-gen IPS detecting & blocking network threats via signatures & behavior

yara-rules

A repository of YARA rules for identifying and classifying malware through pattern-based detection.

Cuckoo Mod

A modified version of Cuckoo Sandbox with enhanced features and capabilities.

Thinkst Canarytokens Detector and Diffuser/Nullifier

A Python script that detects and removes Thinkst Canary Tokens from files using signature-based detection methods.

LORG

A tool for advanced HTTPD logfile security analysis and forensics, implementing various techniques to detect attacks against web applications.

Elastic Security YARA Rules

Signature-based YARA rules for detecting and preventing threats within Linux, Windows, and macOS systems.

Malware Signatures Overview

A collection of Yara signatures developed by Citizen Lab to detect malware used in targeted attacks against civil society organizations.

GCTI Open Source Detection Signatures

GCTI's open-source detection signatures for malware and threat detection

YARA Public YARA rules

A community-maintained repository of YARA rules for detecting and classifying malware based on patterns and characteristics.