#yara-rules

37 C2 Servers, Zero Lines of Broken Encryption: Inside a Live TrickBot Memory Dump

A full static, dynamic, code-level, and memory-forensics teardown — including a live x64dbg breakpoint that caught TrickBot decrypting its…

Day 20: YARA Rules — The Language of Malware Detection

As defenders, we analyze more than logs and network traffic.

SOC 101- YARA Challenge 1 - Malware Detection & Rule Development

Author: Islam Diab Security Analyst & Researcher | Blue Team | Malware Analysis | Reverse Engineering 💼 LinkedIn: linkedin.com/in/diab23…

Deep Dive Into Moka: Analyzing a Babylon RAT-Based Information Stealer and Keylogger

Executive Summary

Wazuh Ansible Series Part 9: Custom Malware Detection with YARA Scheduled Scanning

How I built a YARA scanning pipeline that catches what ClamAV misses — droppers, secret-exfil helpers, encoded launchers, and reverse-shell…

Walkthrough: Reverse Engineering Malware using Cyber Chef and Yara Rules 🦠

In this project, I’ll be deconstructing a piece of malware using various tools to gain a better understanding of how it works. The more we…

Operation ShadowLedger

Official Room Walkthrough

Creating Detection Rules

Having now uncovered the Tactics, Techniques, and Procedures (TTPs) employed by this malware, we can proceed to design detection rules…

Potenciando la ciberseguridad: cómo enriquecer las alertas de Wazuh con YARA e IA generativa

En operaciones de seguridad, detectar una amenaza rápidamente es importante, pero entender qué representa esa amenaza y cómo actuar suele…

Detecting Malware Patterns with YARA Rules

Hunting Threats with Precision: A Practical Guide to YARA Rules for Detection

Stop chasing ghosts. Start writing rules that actually catch malware.