ida-yara-processor
Rule processor
A tool that processes and executes compiled YARA rules within an IDA disassembler environment.
IDA Processor for Compiled YARA Rules
29 stars
2 watching
4 forks
Language: Python
last commit: about 6 years ago
Linked from 1 awesome list
disassembleridaidapython-pluginyarayara-rules
inquest/awesome-yaraRelated projects:
| Repository | Description | Stars |
|---|---|---|
 bitsofbinary/yaraparser | A Python tool to parse and represent Yara rules in a structured format | 8 |
 hyuunnn/hyara | A plugin for multiple reverse engineering tools to generate YARA rules | 224 |
 dissectmalware/yaradbg-backend | An application backend designed to facilitate Yara rule analysis and root cause identification in malware detection. | 24 |
 alexander-hanel/ida_yara | A tool for scanning binary data in IDA using Yara signatures | 22 |
 oalabs/findyara-ida | A plugin for IDA Python that scans binaries with Yara rules and lists matches with offsets | 171 |
 neo23x0/yaranalyzer | Analyzes and reports on Yara rules and files | 362 |
 imp0rtp3/yara-rules | A repository of custom Yara rules for malware analysis and threat intelligence | 18 |
 plyara/plyara | A tool to parse YARA rules into a dictionary representation for easier operations and analysis. | 175 |
 punch-cyber/yaraguardian | A web interface for managing Yara rules and related data | 191 |
 immortalp0ny/yarg | A tool that generates Yara rules from x86/x86-64 code by analyzing instruction structures and parameters. | 25 |
 cyberdefenses/cdi_yara | A collection of YARA rules based on intelligence profiles and file work. | 19 |
 intezer/yara-rules | A repository of pre-defined YARA rules for detecting malware and other malicious software | 126 |
 codewatchorg/burp-yara-rules | Provides Yara rules to identify malicious software in web applications | 44 |
| neo23x0/yargen | Generates YARA rules from malware strings while excluding goodware strings and optionally refines the rules for AI use. | 1,569 |
 fboldewin/yara-rules | A collection of YARA rules used to identify malicious patterns in binary files | 62 |