YARA Rules for ProcFilter Logo

YARA Rules for ProcFilter

0
Free
Visit Website

The rules in this YARA repository are intended to be compatible with ProcFilter. To use this repository configure ProcFilter's INI file to point to this repository location or copy this repository's contents to ProcFilter's localrules directory. These rules are licensed under the MIT license located here.

FEATURES

ALTERNATIVES

A tool for searching a Git repository for interesting content

A payload creation framework for the retrieval and execution of arbitrary CSharp source code.

Yaraprocessor allows for scanning data streams in unique ways and dynamic scanning of payloads from network packet captures.

A 32-bit assembler level analyzing debugger for Microsoft Windows.

A debugger tool for reverse engineers, crackers, and security analysts, with a user-friendly debugging UI and custom agent support.

dynStruct is a tool for monitoring memory accesses of an ELF binary and recovering structures of the original code.

Tool for fingerprinting malware HTTP requests.

A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz