{"adoption": {"forks": 614, "observed_at": "2026-08-28T04:08:18.531732+00:00", "stars": 3783}, "canonical_url": "https://ross.abutalabs.com/products/loki", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Loki - Simple IOC and YARA Scanner", "domain": ["security", "developer-tools"], "enriched": true, "function": ["security", "vulnerability-scanning", "search-engine"], "health_score": 57, "homepage": "https://www.nextron-systems.com/compare-our-scanners/", "language": "Python", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "maintenance", "member_repos": ["Neo23x0/Loki", "Neo23x0/signature-base"], "name": "Loki", "platform": ["windows", "python", "cli"], "pushed_at": "2026-01-12T08:00:47+00:00", "repo": "Neo23x0/Loki", "stars": 3783, "tags": ["yara", "ioc-scanner", "dfir", "incident-response", "threat-hunting", "compromise-assessment", "deprecated", "malware-detection", "command-line", "linux", "macos"], "topics": ["python", "yara", "signature", "scanner", "ioc", "otx", "antivirus", "hash", "yara-rules", "dfir"], "urls": [{"kind": "homepage", "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"kind": "site_page", "url": "https://www.nextron-systems.com/thor/integrations"}, {"kind": "site_page", "url": "https://www.nextron-systems.com/about"}], "use_cases": ["scan a windows host for indicators of compromise", "run yara rules against files and process memory during incident response", "check files against known malicious md5 sha1 sha256 hashes", "triage a suspect endpoint for apt malware", "detect c2 back connections from running processes", "scan a system from removable media without installing software"], "what_it_is": "LOKI is a free, open-source IOC and YARA scanner written in Python for triaging compromised systems. It detects indicators of compromise via filename regexes, YARA rule matches on files and process memory, known malicious hashes, and C2 back-connect checks.", "when_to_avoid": ["you want an actively developed tool - LOKI is deprecated in favor of LOKI RS (Rust) and THOR Lite", "you need eventlog, registry, or autoruns analysis modules", "you require commercial support, JSON output, or syslog integration"], "when_to_choose": ["you need a free, portable IOC/YARA triage scanner for DFIR work", "you want to scan offline systems from removable media", "you rely on the open-source signature set of ~4,000 YARA rules"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/repos/Neo23x0/Loki", "repo": "Neo23x0/Loki", "role": "main", "score": 51}, {"path": "/repos/Neo23x0/signature-base", "repo": "Neo23x0/signature-base", "role": "plugin", "score": 66}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:08:18.531732+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:27:42.650393+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a529f70e6b548277cdc7f2222ec84558816239b3a481188d431ffc557972cdd6", "fetched_at": "2026-08-28T04:08:18.531732+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Neo23x0/Loki"}, {"content_hash": "776ddf4099e1821849e40c15ba11f151d2c94f78914bc4e3f14366128e64a731", "fetched_at": "2026-08-29T09:22:25.751890+00:00", "kind": "homepage", "missing": false, "url": "https://www.nextron-systems.com/compare-our-scanners/"}, {"content_hash": "42bb13ed9b1609565a236a6671896e9b11c07d476fc9ee4e89ec8deb83ad77b9", "fetched_at": "2026-08-29T09:22:25.761185+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/about"}, {"content_hash": "e7a7d160d3e96ccd87ea964097bb66adaf4d57ea847e640cbee4d6f0471ddc7c", "fetched_at": "2026-08-29T09:22:25.762901+00:00", "kind": "site_page", "missing": false, "url": "https://www.nextron-systems.com/thor/integrations"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 62, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4245, "days_push": 233, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 51, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}