Yara-Rules/rules

Issues

• [BUG]False positive for android apps with facebook sdk

  #445 opened 5 months ago by feraligatr
  0

• False positive for Rider app.jar file [BUG]

  #439 opened a year ago by securitronyesman
  0

• DEBUG_SCRIPT: unbound variable

  #434 opened 2 years ago by nateohin
  0

• undefined identifier "is__elf"

  #433 opened 2 years ago by rocco-96
  1

• Rule for detection corrupted (damage) file

  #409 opened 3 years ago by kont45
  3

• License

  #404 opened 3 years ago by TechnikEmpire
  2

• UUID for Yara Rules to uniquely identify the rule

  #418 opened 3 years ago by adulau
  3

• False Positives - PDF Trailer Rule (invalid_trailer_structure)

  #412 opened 3 years ago by malvidin
  1

• Big_Numbers1 rule blocks PDF files with IDs in the trailer

  #425 opened 3 years ago by abdulmuizzf
  1

• Archive Retefe rule

  #421 opened 3 years ago by bartblaze
  0

• False Positives for GLASSES?

  #422 opened 3 years ago by Nilstorm
  1

• False positive libQt5Gui.so.5

  #420 opened 3 years ago by MandiYang
  0

• [BUG] email/bank_rule.yar is problematic

  #419 opened 3 years ago by kprkpr
  1

• Rule contradiction

  #358 opened 4 years ago by Inndy
  2

• [BUG]Cannot find in malware directory : WhiskeyBravo.yara

  #399 opened 4 years ago by linlih
  0

• Liberapay possible issue

  #405 opened 4 years ago by TechnikEmpire
  2

• Yara Rules Compatible With IoT Devices Intents

  #408 opened 4 years ago by jpsla94
  2

• @Auxilus I believe we want to cross compile the packages in the docker image and get the the debs from there. You then need docker.

  #406 opened 4 years ago by raminam6488
  2

• [BUG]

  #401 opened 4 years ago by ruppde
  1

• Rulesets for mobile_malware is empty ,But I really need it

  #402 opened 4 years ago by lizhixiang0
  1

• [New Rule]

  #398 opened 4 years ago by raminam6488
  0

• nys

  #397 opened 4 years ago by raminam6488
  0

• This rule was created by https://github.com/Neo23x0 so it may be worth to ask him about it.

  #396 opened 4 years ago by raminam6488
  0

• [New Rule2

  #395 opened 4 years ago by raminam6488
  2

• Deployment to RSA NWE

  #335 opened 4 years ago by FatnLazy
  1

• Propuesta

  #279 opened 4 years ago by mmorenog
  7

• Using common_rules in malware with yara-python doesn't work

  #339 opened 4 years ago by supremeliter
  9

• [Question] how to compile yara rules in python 3

  #382 opened 4 years ago by DEEP7696
  1

• Different behavior of the same Yara rules on Linux/Windows servers

  #386 opened 4 years ago by ivankott
  1

• [BUG]

  #391 opened 4 years ago by raminam6488
  2

• [BUG] RAT_PoetRATDoc.yar and RAT_PoetRATPython.yar both define same rule

  #380 opened 5 years ago by MJJoker
  1

• false positive, or is it?

  #372 opened 5 years ago by vieridipaola
  1

• Failing CI

  #351 opened 5 years ago by DanielRuf
  2

• [BUG]antidebug_antivm.yar when checked by clamscan

  #370 opened 5 years ago by dominicraf
  2

• Add rules MalconfScan

  #353 opened 5 years ago by jholgui
  1

• File "./malware/APT_FIN7.yar" doesn't exist in the repo.

  #363 opened 5 years ago by ThibaultReuille
  1

• Big False Positive

  #366 opened 5 years ago by liberodark
  1

• Arkei Stealer - Yara Rule

  #329 opened 5 years ago by jholgui
  4

• Rule to detect Cobalt Strike instead of FIN7

  #355 opened 5 years ago by halos
  1

• BUG

  #347 opened 6 years ago by chuangshizhiqiang
  1

• antidebug_antivm.yar contains rules unrelated to antidebug and antivm

  #316 opened 6 years ago by knowmalware
  2

• Duplicated Identifiers errors, "sync" error

  #303 opened 6 years ago by 4n6analist
  4

• undefined identifier "is__elf"

  #323 opened 6 years ago by jestrada78
  6

• Repository with webshells rules, focus in linux servers

  #330 opened 6 years ago by jholgui
  0

• Doesn't match?

  #326 opened 6 years ago by TLINDEN
  2

• "Private Global" preventing index.yar and malware_index.yar from working correctly

  #307 opened 6 years ago by VVinner38
  2

• warning error

  #322 opened 6 years ago by shoaibabbasi
  2

• problem cuckoo with this repo

  #312 opened 7 years ago by rayenmessaoudi
  1

• Yara rule

  #280 opened 7 years ago by mmorenog
  1

• any mining malware rules？

  #282 opened 7 years ago by kevien
  6