ProcFilter Logo

ProcFilter

0
Free
Visit Website

ProcFilter is a process filtering system for Windows with built-in YARA integration. YARA rules can be instrumented with custom meta tags that tailor its response to rule matches. It runs as a Windows service and is integrated with Microsoft's ETW API, making results viewable in the Windows Event Log. Installation, activation, and removal can be done dynamically and does not require a reboot. ProcFilter's intended use is for malware analysts to be able to create YARA signatures that protect their Windows environments against a specific threat. It does not include a large signature set. Think lightweight, precise, and targeted rather than broad or all-encompassing. ProcFilter is also intended for use in controlled analysis environments where custom plugins can perform artifact-specific actions. Designed to be easy to adopt, ProcFilter's integration with Git and Event Log minimize the need for additional tools or infrastructure to deploy rules or gather results. ProcFilter is compatible with Windows 7+ and Windows Server 2008+ systems. Installers ProcFilter x86/x64 Release/Debug Installers Note: Unpatched Windows 7 systems require hotfix 3033929 to load the driver component.

FEATURES

ALTERNATIVES

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol, with a focus on incident handling automation and threat intelligence processing.

The FASTEST Way to Consume Threat Intelligence and make it actionable.

RiskAnalytics Solutions offers community projects for cyber threat intelligence sharing and collaboration.

A database of Tor exit nodes with their corresponding IP addresses and timestamps.

A repository of freely usable Yara rules for detection systems, with automated error detection workflows.

A modular tool for collecting intelligence sources for files and outputting in CSV format.

A command-line tool that fetches known URLs from various sources to identify potential security threats and vulnerabilities.

A collection of YARA rules for research and hunting purposes.

PINNED