Signature Generation

Honeycomb

Automated signature creation using honeypots for network intrusion detection systems.

Cythereal MAGIC™

Malware hunting platform that auto-generates YARA rules from shared code analysis.

Yara_fn IDAPython script

An IDAPython script that generates YARA rules for basic blocks of the current function in IDA Pro, with automatic masking of relocation bytes and optional validation against file segments.

Binsequencer

Binsequencer automatically generates YARA detection rules by analyzing collections of similar malware samples and identifying common x86 instruction sequences across the corpus.

YaYaGen

Automatic YARA rule generator based on Koodous reports with limited false positives.

VxSig

VxSig is a Google-developed tool that automatically generates antivirus byte signatures from similar binaries for Yara and ClamAV detection engines.

YARA-Signator

Automatic YARA rule generation for malware repositories.

AutoYara

AutoYara is a Java tool that automatically generates YARA rules from malware samples using biclustering algorithms to help analysts create detection rules for malware families.

Yaraprocessor

Yaraprocessor allows for scanning data streams in unique ways and dynamic scanning of payloads from network packet captures.