chkrootkit
A tool to locally check for signs of a rootkit with various checks and tests.
Plyara is a script and library that lexes and parses a file consisting of one or more YARA rules into a Python dictionary representation, facilitating bulk operations, transformations, extraction of indicators, attribute updates, and corpus analysis. It leverages the Python module PLY for lexing YARA rules and is a community-maintained fork of the original plyara by 8u1a.
A tool to locally check for signs of a rootkit with various checks and tests.
YARA extension for Visual Studio Code with code completion and snippets
A .NET wrapper for libyara that provides a simplified API for developing tools in C# and PowerShell.
A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.
Tool for decompressing malware samples to run Yara rules against them.
Interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features