├── .gitignore ├── LICENSE ├── README.md ├── Requirements.txt ├── generate.py ├── sample_data ├── authenticode │ ├── legitimate_certs.yaml │ └── stolen_certs.yaml ├── office_exploits │ └── ole.yaml └── resources │ ├── icons.yaml │ └── malware.yaml └── yaml2yara ├── __init__.py └── templates ├── authenticode.html ├── authenticode_raw.html ├── base.html ├── helpers.html ├── office_exploits.html └── resources.html /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/README.md -------------------------------------------------------------------------------- /Requirements.txt: -------------------------------------------------------------------------------- 1 | Jinja2>=2.10.1 2 | MarkupSafe==1.0 3 | pyyaml>=4.2b1 -------------------------------------------------------------------------------- /generate.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/generate.py -------------------------------------------------------------------------------- /sample_data/authenticode/legitimate_certs.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/sample_data/authenticode/legitimate_certs.yaml -------------------------------------------------------------------------------- /sample_data/authenticode/stolen_certs.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/sample_data/authenticode/stolen_certs.yaml -------------------------------------------------------------------------------- /sample_data/office_exploits/ole.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/sample_data/office_exploits/ole.yaml -------------------------------------------------------------------------------- /sample_data/resources/icons.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/sample_data/resources/icons.yaml -------------------------------------------------------------------------------- /sample_data/resources/malware.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/sample_data/resources/malware.yaml -------------------------------------------------------------------------------- /yaml2yara/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /yaml2yara/templates/authenticode.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/yaml2yara/templates/authenticode.html -------------------------------------------------------------------------------- /yaml2yara/templates/authenticode_raw.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/yaml2yara/templates/authenticode_raw.html -------------------------------------------------------------------------------- /yaml2yara/templates/base.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/yaml2yara/templates/base.html -------------------------------------------------------------------------------- /yaml2yara/templates/helpers.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/yaml2yara/templates/helpers.html -------------------------------------------------------------------------------- /yaml2yara/templates/office_exploits.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/yaml2yara/templates/office_exploits.html -------------------------------------------------------------------------------- /yaml2yara/templates/resources.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/yaml2yara/HEAD/yaml2yara/templates/resources.html --------------------------------------------------------------------------------