Build software better, together

pedramamini / awesome-yara

A curated list of awesome YARA rules, tools, and people.

ioc awesome awesome-list threat-hunting malware-analysis malware-research yara yara-rules malware-detection yara-manager yara-signatures malware-rules yara-scanner awesome-yara

Updated Jun 15, 2026

sroberts / awesome-iocs

Star

Curated sources of indicators of compromise, detection signatures and IOC tools.

ioc awesome signature dfir suricata awesome-list threat-hunting misp yara snort yara-rules threat-intelligence yara-signatures snort-rules suricata-rules indicator-of-compromise

Updated Oct 1, 2026
Shell

reversinglabs / reversinglabs-yara-rules

Star

ReversingLabs YARA Rules

reverse-engineering yara yara-rules ransomware-prevention malware-detection ransomware-detection indicators-of-compromise yara-signatures

Updated Nov 3, 2025
YARA

roadwy / DefenderYara

Star

Extracted Yara rules from Windows Defender mpavbase and mpasbase

ioc dfir defender antivirus malware-analysis yara yara-rules threat-intelligence yara-signatures

Updated May 14, 2026
YARA

bartblaze / Yara-rules

Star

Collection of private Yara rules.

threat-hunting yara yara-rules threat-intelligence malware-detection ransomware-detection yara-signatures

Updated Jan 28, 2026
YARA

InQuest / yara-rules

Star

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

threat-hunting yara yara-rules yara-signatures

Updated May 11, 2022
Python

mthcht / ThreatHunting-Keywords-yara-rules

Sponsor

Star

yara detection rules for hunting with the threathunting-keywords project

incident-response dfir awesome-list threat-hunting hunting offensive-security yara-rules blueteam threat-intelligence yara-forensics hacktools yara-signatures yara-scanner detection-engineering forensics-tools

Updated May 11, 2025
YARA

InQuest / ThreatKB

Star

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

malware-research yara yara-rules yara-manager yara-signatures

Updated Aug 12, 2026
JavaScript

bartblaze / FARA

Star

Repository that contains a set of purposefully erroneous Yara rules.

yara yara-rules yara-signatures

Updated Jul 23, 2025
YARA

thewhiteninja / yarasploit

Star

YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.

python windows linux api shellcode yara yara-rules metasploit yara-signatures

Updated Nov 7, 2023
YARA

ail-project / ail-yara-rules

Star

A set of YARA rules for the AIL framework to detect leak or information disclosure

ail-framework yara yara-rules information-disclosure yara-signatures ail-yara-rules

Updated Jan 31, 2025
YARA

deadbits / yara-rules

Star

Collection of YARA signatures from individual research

malware-analysis malware-research yara yara-rules malware-detection yara-signatures malware-protection

Updated Nov 20, 2023
YARA

tejasprasad2008-afk / TraceTree

Star

TraceTree - Runtime behavioral analysis tool that maps the process cascade of suspicious packages into a directed tree, catching supply chain attacks that install-time scanners miss.

docker security-tools malware-detection yara-forensics yara-signatures runtime-security cybersecurity-tools local-ai ollama

Updated Oct 1, 2026
Python

tbalz2319 / RapidRepoPull

Star

The goal of this program is to quickly pull and install repos from its list

python bash active-directory python3 pentesting security-automation security-tools scanner-web yara-signatures

Updated Sep 21, 2026
Python

h4vox / PlanqX_EDR-Endpoint-Detection-and-Response

Star

PlanqX EDR is an open-source, advanced Endpoint Detection and Response (EDR) solution for Windows, offering real-time system and network security. Features include API hooking, ELAM, ETW integration, AMSI, kernel-mode and APC callbacks, and baseline detection to provide comprehensive threat defense across boot-time and runtime.

python windows malware-analysis hashes network-analysis heuristic-algorithm security-tools threat-intelligence yara-signatures windows-exploit-suggester

Updated Jul 10, 2026
C

Fadavvi / Yara-Repo

Star

A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

threat-hunting threatintel yara yara-rules blueteam threat-intelligence yara-forensics yara-signatures blueteaming

Updated Aug 26, 2023
Shell

AzzOnFire / yarka

Star

IDA plugin for YARA signature creation

ida ida-pro ida-plugin idapython yara yara-rules yara-signatures

Updated Nov 30, 2025
Python

nccgroup / yaml2yara

Star

Generate bulk YARA rules from YAML input

yaml yara yara-signatures

Updated Feb 3, 2020
HTML

pressidium / pressidium-yara-rules

Star

Welcome to the Pressidium® Yara Rules repository. This section contains a carefully curated collection of Yara rules specifically designed to detect and prevent WordPress or PHP malware and viruses, ensuring a safer online environment.

malware-analysis yara yara-rules malware-detection yara-signatures

Updated Nov 5, 2023
YARA

cod3nym / detection-rules

Star

Collection of my own detection rules

yara yara-rules yara-signatures

Updated Jan 6, 2026
YARA

Navigation Menu

yara-signatures

Here are 49 public repositories matching this topic...

pedramamini / awesome-yara

sroberts / awesome-iocs

reversinglabs / reversinglabs-yara-rules

roadwy / DefenderYara

bartblaze / Yara-rules

InQuest / yara-rules

mthcht / ThreatHunting-Keywords-yara-rules

InQuest / ThreatKB

bartblaze / FARA

thewhiteninja / yarasploit

ail-project / ail-yara-rules

deadbits / yara-rules

tejasprasad2008-afk / TraceTree

tbalz2319 / RapidRepoPull

h4vox / PlanqX_EDR-Endpoint-Detection-and-Response

Fadavvi / Yara-Repo

AzzOnFire / yarka

nccgroup / yaml2yara

pressidium / pressidium-yara-rules

cod3nym / detection-rules

Add this topic to your repo