Repository of yara rules

YARA signature and IOC database for my scanners and tools

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Living Off The Land Drivers

Scripts for the Ghidra software reverse engineering suite.

A static analyzer for PE executables.

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

Repository of YARA rules made by Trellix ATR Team

16,432 Free Yara rules created by

Collection of private Yara rules.

Indicators of stalkerware apps

Detection in the form of Yara, Snort and ClamAV signatures.

Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can a…

Various Yara signatures (possibly to be included in a release later).

Notes and IoCs of fresh malware

YARA detection rule for CVE-2024-4367 arbitrary javascript execution in PDF.js

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.