基于 YARA 规则的恶意软件扫描器,可集成到 CI/CD 流水线和运行时环境中,用于云原生场景的威胁检测与 IOC 排查。
一款开源的二进制文件分析引擎,能识别可执行文件类型、检测加壳与编译器特征,并支持 YARA 规则和熵值分析,常用于逆向工程与恶意软件排查。
一站式恶意软件分析工具,支持 APK、ELF、EXE、OSX 等多平台样本,可识别加壳并提取特征,还提供 MCP Server 供 Agent 调用。
Full Changelog : https://github.com/deepfence/YaraHunter/compare/v2.5.7...v2.5.8
Added: YARA-X. Changes: pev was renamed to readpe. Setup program now is split into multiple files.
… by @ramanan-ravi in https://github.com/deepfence/YaraHunter/pull/117 Full Changelog : https://github.com/deepfence/YaraHunter/compare/v2.5.6...v2.5.7
… by @ramanan-ravi in https://github.com/deepfence/YaraHunter/pull/114 Revert "Bump version to 2.5.5" by @ramanan-ravi in https://github.com/deepfence/YaraHunter/pull/115
… by @ramanan-ravi in https://github.com/deepfence/YaraHunter/pull/113 Full Changelog : https://github.com/deepfence/YaraHunter/compare/v2.5.0...v2.5.2
…sion by @noboruma in https://github.com/deepfence/YaraHunter/pull/106 add support for rules download in cli mode by @gnmahanth in https://github.com/deepfence/YaraHunter/