awesome-yara
awesome-appsec
| awesome-yara | awesome-appsec | |
|---|---|---|
| 7 | 6 | |
| 3,265 | 6,110 | |
| 1.9% | 0.8% | |
| 7.1 | 0.0 | |
| 28 days ago | 8 months ago | |
| PHP | ||
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
awesome-yara
- XSOAR Yara Feeds
- Incorporating YARA Into Security Processes?
-
Cybersecurity Repositories
YARA
-
YARA Rules for Malware
Check out the myriad of resources available here: https://github.com/InQuest/awesome-yara
-
Identifying packers, crypters or protectors
A signature-based approach with YARA can work to fingerprint the specific software used to obfuscate the malware. A lot of YARA rules for a variety of purposes can be found here, and it might be useful to aggregate ones you care about into your own little detection pipeline.
-
What are the best FOSS YARA rules you would recommend to deploy?
https://github.com/InQuest/awesome-yara#rules
- InQuest/awesome-yara - A curated list of awesome YARA rules, tools, and people.
awesome-appsec
-
Aside from OWASP, are there other relevant certs to get for App Sec?
For resources : https://github.com/paragonie/awesome-appsec
-
Cybersecurity Repositories
AppSec
-
Resources to learn secure coding? App Sec and Web Sec?
Here is a repo of some resources. You are going to need to learn to walk before you run so that at a concrete level you can articulate what secure vs insecure code is and why it matters, then dive into appsec. No disrespect intended but from the way this is written my suggestion would be to focus on computer science foundational concepts as well as spending significant time writing and reading code. This will likely be a several year journey if you are a total beginner but the best time to start is now :)
- Information and learning resources for cryptography newcomers
-
Anyone in AppSec (Application Security)?
Come over to /r/devsecops to get more information about the field. Also, there are lots of good sources, you can get some from my blog, or Awesome AppSec, or Security Prince and other places.
- I'm preparing for the interview and I've curated a list of resources that might be helpful for you also.
What are some alternatives?
malware-ioc - Indicators of Compromises (IOC) of our various investigations
API-Security-Checklist - Checklist of the most important security countermeasures when designing, testing, and releasing your API
signature-base - YARA signature and IOC database for my scanners and tools
UnSAFE_Bank - Vulnerable Banking Suite
awesome-malware-analysis - Defund the Police.
see awesome-security - A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
yara - The pattern matching swiss knife
labs - This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.
audit-node-modules-with-yara - Audit Node Module folder with YARA rules to identify possible malicious packages hiding in node_moudles
SecureCodingDojo - The Secure Coding Dojo is a platform for delivering secure coding knowledge.
Detect-It-Easy - Program for determining types of files for Windows, Linux and MacOS.
Security_Engineer_Interview_Questions - Every Security Engineer Interview Question From Glassdoor.com