FARA
FARA, or Faux YARA, is a simple repository that contains a set of purposefully erroneous Yara rules. It is meant as a training vehicle for new security analysts, those that are new to Yara and even Yara veterans that want to keep their rule writing (and debugging) sharp. If you're here, you already know what Yara is, but if not, do visit Yara's Github repository: https://github.com/VirusTotal/yara. How do I use FARA? Very simple, download or clone the repo and start figuring out what is wrong with each and every Yara rule! Errors may have been created on the following levels: - Syntax - Logical - Runtime - Semantic - Efficiency or effectiveness - Others... How do I actually test these rules? There's a few methods: - Go hardcore and just look at them in your favourite text editor. Don't use syntax highlighting as an additional challenge. - The easiest and best way: try to run them with Yara (use the latest available stable version) and make way from there. - You can use/try Florian Roth's yaraQA: https://github.com/Neo23x0/yaraQA - In addition, you can also clone this repo, then run YARA-CI on it: https://yara-ci.cloud.virustotal.com/. If you want an example of how Yara-CI can help, h
FEATURES
ALTERNATIVES
Exhaustive checklist for securing Node.js web services with a focus on error handling and custom error pages.
A non-commercial wargame site offering pwn challenges related to system exploitation with different difficulty levels.
A comprehensive and immersive 13-week course by NYU Tandon's OSIRIS Lab introducing students to offensive security with practical applications and research projects.
Collection of cybersecurity conference videos from GreHack 2018 covering various cutting-edge topics.
A newsletter service that tracks and reports weekly changes in detection engineering rules and updates across multiple GitHub repositories.
Curated list of acronyms and terms related to cyber security landscape with explanations beyond buzzwords.
Comprehensive cheat sheet for SQLite SQL injection techniques and payloads.
A documentation template library for implementing industrial information security management systems.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.