YARA-Signator Logo

YARA-Signator

0
Free
Visit Website

Automatic YARA rule generation tool used to build YARA signatures for malware repositories, limited to x86/x86-64 executables and memory dumps for Linux, macOS, and Windows. Requires a curated malware repository with disassembly reports as input files.

FEATURES

ALTERNATIVES

A tool for malware analysts to search through base64-encoded samples and generate yara rules.

Yaraprocessor allows for scanning data streams in unique ways and dynamic scanning of payloads from network packet captures.

Discontinued project for file-less persistence, attacks, and anti-forensic capabilities on Windows 7 32-bit systems.

Collection of malware persistence information and techniques

A Python script that finds endpoints in JavaScript files to identify potential security vulnerabilities.

Platform for uploading, searching, and downloading malware samples.

A yara module for searching strings inside zip files

A detailed analysis of malicious packages and how they work