Loki - Simple IOC and YARA Scanner

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

Signatures and IoCs from public Volexity blog posts.

Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)

Django web interface for managing Yara rules

Parse YARA rules and operate over them more easily.

Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

Yara scan Phishing Kit's Zip archive(s)

YaraScanner is a file pattern-matching tool based on YARA rules.

Enter Morpheus, your advanced IOC detection tool. Powered by expert YARA rules and integrated with VirusTotal, it scans and identifies Indicators of Compromise with unmatched precision across diverse formats, redefining cybersecurity defense.

Bypass YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellcode sequences.

Performs OCR on image files and scans them for matches to YARA rules

Scans Slack for API tokens, credentials, passwords, and more using YARA rules

Validates yara rules and tries to repair the broken ones.

Revisor is a multi-AV file analyzer used to determine whether a file is malicious or not. It is integrated with Virus Total and ClamAV. It also provides crowd sourced Yara rules to identify the malware file.

IDA Processor for Compiled YARA Rules

Automatic generation of YARA rules from sample files.

IDA plugin for YARA signature creation

Scan extracted file from Zeek with Yara rules and get statistical analysis for matching files. Optionally, simulate matching malicious files with Picus.