Elastic Security YARA Rules Logo

Elastic Security YARA Rules

0
Free
Visit Website

Elastic Security provides signature-based YARA rules within the Elastic Endpoint product to detect and prevent emerging threats within Linux, Windows, and macOS systems. The repository holds over 1,000 YARA rules used for stopping Trojans, ransomware, cryptominers, and more, suitable for Network Defending, Threat Hunting, Incident Response, Malware Analysis, and more. Contributions are welcome, and the rules are licensed under the Elastic License v2.

FEATURES

ALTERNATIVES

An informational repo about hunting for adversaries in your IT environment.

NECOMA focuses on data collection, threat analysis, and developing new cyberdefense mechanisms to protect infrastructure and endpoints.

A simple, self-contained modular host-based IOC scanner for incident responders.

A project focusing on understanding and combating threats to the Internet economy and net citizens.

Acapulco is a Splunk application that automatically generates meta-events from hpfeeds channels and visualizes them using D3.js.

A collection of tools and resources for threat hunters.

A tool for fetching and visualizing cyber threat intelligence data with Elasticsearch and Kibana integration.

A platform providing real-time threat intelligence streams and reports on internet-exposed assets to help organizations monitor and secure their attack surface.

PINNED