GitHub · Neo23x0/signature-base (YARA rules)

Merge pull request #432 from marius-benthin/fix-yara-ids feat: required "id" meta field for YARA rules

feat: check id meta field using Python script and GitHub workflow

fix: duplicate YARA ids

fix: add missing ids to YARA rules

Merge pull request #421 from PixelatedContinuum/hunters-ledger-adaptixc2 Add rule for AdaptixC2 Windows beacon

Add rule for AdaptixC2 Windows beacon Detects the stock Windows beacon of the AdaptixC2 post-exploitation framework by its Itanium-ABI RTTI type names and default HTTP heartbeat header, so it matches an unmodified build regardless of operator.

Merge branch 'master' of https://github.com/Neo23x0/signature-base

refactor: disabled old rule

Merge pull request #417 from cod3nym/apt-virtualizor-compromise Add rules for Virtualizor compromise

Update yara/apt_virtualizor_compromise_aug26.yar Co-authored-by: Mohamed Ashraf <[email protected]>

add hash iocs for virtualizor compromise

add filename iocs for virtualizor compromise

add c2 icos for virtualizor compromise

Create apt_virtualizor_compromise_aug26.yar

fix: FPs

Merge pull request #413 from Aryu-RU/add-mal-gentlemen-ransomware Add rule for The Gentlemen ransomware

Add rule for The Gentlemen ransomware

Merge pull request #412 from marius-benthin/aur-packages new: AUR rules

new: AUR rules

Merge pull request #411 from cod3nym/patch-1 Add IOCs for UNC1549