anubi-signatures

In this repo signatures used by Anubi project are kept.

These are the result of IOC extraction from my personal MISP instance using the following open source feeds:

1. CIRCL OSINT Feed
2. The Botvrij.eu Data
3. Malware Bazaar Feed
4. dan.me.uk node list
5. URLHaus Feed
6. Threatfox Feed

Yara rules are used from the sources listed below:

1. Florian Roth Neo23x0 signature-base repository
2. Yara-Rules rules repository
3. Malpedia rules repository
4. Elastic rules repository