CobaltStrikeScan

An OCaml Ctypes wrapper for the YARA matching engine that enables malware identification capabilities in OCaml applications.

A collection of YARA rules specifically designed for forensic investigations and malware analysis, providing pattern matching capabilities for files and memory dumps.

VolatilityBot automates memory dump analysis by extracting executables, detecting code injections, and performing automated malware scanning using YARA and ClamAV.

Malscan is a tool to scan process memory for YARA matches and execute Python scripts.

A toolkit for forensic analysis of network appliances with YARA decoding options and frame extraction capabilities.