KLara
KLara project is aimed at helping Threat Intelligence researchers hunt for new malware using Yara. In order to hunt efficiently for malware, one needs a large collection of samples to search over. Researchers usually need to fire a Yara rule over a collection / set of malicious files and then get the results back. In some cases, the rule needs adjusting. Unfortunately, scanning a large collection of files takes time. Instead, if a custom architecture is used, scanning 10TB of files can take around 30 minutes. KLara, a distributed system written in Python, allows researchers to scan one or more Yara rules over collections with samples, getting notifications by e-mail as well as the web interface when scan results are ready. Features Modern web interface, allowing researchers to 'fire and forget' their rules, getting back results by e-mail / API Powerful API, allowing for automatic Yara jobs submissions, checking their status and getting back results. API Documentation will be released soon. Distributed system, running on commodity hardware, easy to deploy and implement. Architecture KLara leverages Yara's power, distributing scans using a dispatcher-worker mode.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A serverless, real-time, and retroactive malware detection tool that scans files with YARA rules and alerts incident response teams.
Binwalk is a tool for analyzing, reverse engineering, and extracting firmware images with security and Python 2.7 deprecation notices.
A tool to locally check for signs of a rootkit with various checks and tests.
RABCDAsm is a collection of utilities for ActionScript 3 assembly/disassembly and SWF file manipulation.
A tool to help exploit XXE vulnerabilities by sending a crafted XML file to the server and parsing it to extract the data.
Binary analysis and management framework for organizing malware and exploit samples.
ILSpy is the open-source .NET assembly browser and decompiler with various decompiler frontends and features.
A program to manage yara ruleset in a database with support for different databases and configuration options.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.