Yara Rules

Real-time threat intelligence service powered by Google's security ecosystem

DFIR platform for endpoint triage & investigation with EDR telemetry import

Platform for building CTI capabilities with centralized threat intelligence hub

Scans containers & filesystems for malware using YARA rules

Centralized platform for managing and configuring Corelight Sensors

Network detection and response platform with AI-powered threat detection

Cloud-native SIEM, SOAR, and threat intel platform for SecOps teams

AI-powered threat detection and recovery for backup data and snapshots

File and network threat intelligence repository with reputation lookups

Enterprise file analysis platform for high-volume malware detection

Malware analysis platform for SOC teams with binary analysis and threat detection

Enterprise threat intelligence platform with APAC focus and adversary tracking

Centralized threat intelligence platform for aggregating and operationalizing IOCs

EDR platform with EPP capabilities for endpoint threat detection and response

Malware scanning tool for DFIR using 40+ engines from ReversingLabs

EDR platform for workstation and server protection with EPP capabilities

Open-source detection rules for email attacks like BEC, phishing, and malware

Malware intelligence marketplace aggregating multiple detection engines

CrowdFMS is a CrowdStrike framework that automates malware sample collection from VirusTotal using YARA rule-based notifications and the Private API system.

ConventionEngine is a Yara rule collection that analyzes PE files by examining PDB paths for suspicious keywords, terms, and anomalies that may indicate malicious software.

A tool that generates pseudo-malicious files to trigger YARA rules.

YaraHunter scans container images, running Docker containers, and filesystems using YARA rules to detect malware indicators and signs of compromise.

Cyber Intelligence Management Platform with threat tracking, forensic artifacts, and YARA rule storage.

Binsequencer automatically generates YARA detection rules by analyzing collections of similar malware samples and identifying common x86 instruction sequences across the corpus.