Elastic Security YARA Rules Logo

Elastic Security YARA Rules

0
Free
Visit Website

Elastic Security provides signature-based YARA rules within the Elastic Endpoint product to detect and prevent emerging threats within Linux, Windows, and macOS systems. The repository holds over 1,000 YARA rules used for stopping Trojans, ransomware, cryptominers, and more, suitable for Network Defending, Threat Hunting, Incident Response, Malware Analysis, and more. Contributions are welcome, and the rules are licensed under the Elastic License v2.

FEATURES

ALTERNATIVES

Collection of YARA signatures from recent malware research.

Intelligence feeds for cybersecurity professionals to stay informed about emerging threats and trends.

A serverless application for creating and monitoring URL tokens with threat intelligence and customizable alerts.

A threat intelligence platform that monitors, analyzes, and provides detailed information about threat actors targeting non-human identities across various industries.

Automated framework for collecting and processing samples from VirusTotal with YARA rule integration.

A tool designed to extract additional value from enterprise-wide AppCompat / AmCache data

Repository of Yara signatures for detecting targeted attacks on civil society organizations

Official repository of YARA rules for threat detection and hunting