A curated list of awesome YARA rules, tools, and people.

ioc awesome awesome-list threat-hunting malware-analysis malware-research yara yara-rules malware-detection yara-manager yara-signatures malware-rules yara-scanner awesome-yara

• Updated Jun 15, 2026

Loki - Simple IOC and YARA Scanner

python ioc scanner signature hash dfir antivirus yara yara-rules otx

• Updated Jan 12, 2026
• Python

DIE engine

entropy reverse-engineering signature disassembler elf binary-analysis program-analysis hacktoberfest yara unpacker hacktoberfest22

• Updated Nov 12, 2026
• C++

YARA signature and IOC database for my scanners and tools

ioc scanner anti-virus signature hash dfir threat-hunting yara yara-rules threat-intelligence

• Updated Nov 6, 2026
• YARA

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

android machine-learning obfuscation antivirus malware-analysis malware-research yara packers malware-detection rasp yara-forensics android-protect-apps android-protection appshielding

• Updated Oct 21, 2026
• YARA

Security sensor for realtime threat detection and protection

windows security instrumentation windows-kernel etw threat-hunting yara red-team security-tools malware-detection blue-team mitre-attack threat-detection endpoint-security purple-team windows-security detection-engineering endpoint-detection-response forencics

• Updated Nov 9, 2026
• Go

Indicators of Compromises (IOC) of our various investigations

ioc malware misp yara

• Updated Nov 10, 2026
• YARA

yarGen is a generator for YARA rules

python malware malwareanalysis malware-analysis malware-research yara

• Updated Jan 10, 2026
• Python

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting

bash clamav intrusion-detection inotify yara security-scanner linux-security malware-detection

• Updated May 24, 2026
• Shell

Detect potentially malicious PHP files

php malware antivirus yara webshell

• Updated Oct 20, 2023
• PHP

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

aws security lambda serverless terraform yara malware-detection

• Updated Dec 12, 2023
• Python

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

ioc malware ci-cd threat-hunting hacktoberfest yara devsecops yara-scanner devsecops-pipeline devsecops-best-practices

• Updated Mar 7, 2026
• Go

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

constants encoding magic patterns data-structures hacktoberfest yara formats pattern-language imhex

• Updated Nov 8, 2026
• ImHex Pattern Language

Curated sources of indicators of compromise, detection signatures and IOC tools.

ioc awesome signature dfir suricata awesome-list threat-hunting misp yara snort yara-rules threat-intelligence yara-signatures snort-rules suricata-rules indicator-of-compromise

• Updated Oct 1, 2026
• Shell

Real-time, container-based file scanning at enterprise scale

golang security detection python3 cfc yara target-cfc

• Updated Nov 10, 2026
• Python

ReversingLabs YARA Rules

reverse-engineering yara yara-rules ransomware-prevention malware-detection ransomware-detection indicators-of-compromise yara-signatures

• Updated Nov 3, 2025
• YARA

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.

osint malware ukraine threat-hunting iocs cti yara threat-intelligence

• Updated Jun 26, 2023
• YARA

Extract and aggregate threat intelligence.

ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform

• Updated May 26, 2026
• Python

Repository of YARA rules made by Trellix ATR Team

threat-hunting iocs yara threat-intelligence

• Updated Mar 18, 2025
• YARA

Modular file scanning/analysis framework

python linux metadata malware python-script antivirus malware-analyzer malware-analysis malware-research scanning cuckoo analytic-machines analysis-framework yara

• Updated Oct 8, 2019
• Python