ReversingLabs YARA Rules Logo

ReversingLabs YARA Rules

0
Free
Visit Website

Welcome to the official ReversingLabs YARA rules repository! The repository will be updated continuously, as we develop rules for new threats, and after their quality has been proven through testing in our cloud and other environments. These rules have been written by our threat analysts, for threat hunters, incident responders, security analysts, and other defenders that could benefit from deploying high-quality threat detection YARA rules in their environment. Our detection rules, as opposed to hunting rules, need to satisfy certain criteria to be eligible for deployment, namely: * be as precise as possible, without losing detection quality * aim to provide zero false-positive detections In order for the rules to be easy to understand and maintain, we adopted the following set of goals: * clearly named byte patterns * readable and transparent conditions * match unique malware functionality * prefer code byte patterns over strings To ensure the quality of our rules, we continuously and extensively test them in our cloud, on over 10B (and rising) unique binaries. Rules are evaluated on every layer to detect threats within layered objects, such as packed PE files, documents, and other types of files.

FEATURES

ALTERNATIVES

A modular tool for collecting intelligence sources for files and outputting in CSV format.

AbuseIPDB offers tools and APIs to report and check abusive IPs, enhancing network security.

ONYPHE is a cyber defense search engine that discovers exposed assets and provides real-time monitoring to identify vulnerabilities and potential risks.

Provides advanced external threat intelligence to help organizations proactively identify and mitigate potential security threats.

A Python library for handling TAXII v1.x Messages and invoking TAXII Services.

OpenPhish provides real-time phishing trends, detecting new phishing URLs and targeting various brands.

A digital risk protection platform that combines threat intelligence, dark web monitoring, attack surface management, brand protection, and supply chain intelligence to detect and respond to external cyber threats.

RiskAnalytics Solutions offers community projects for cyber threat intelligence sharing and collaboration.

PINNED