0xrawsec / geneLinks
Signature engine for all your logs
☆173Updated 2 years ago
Alternatives and similar repositories for gene
Users that are interested in gene are comparing it to the libraries listed below
Sorting:
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆216Updated 6 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆115Updated last month
- simple YARA-based IOC scanner☆175Updated last month
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆86Updated 7 months ago
- YARA rule analyzer to improve rule quality and performance☆110Updated 3 weeks ago
- Golang Parser for Microsoft Event Logs☆106Updated 3 months ago
- An Inofficial Sysmon Version History (Change Log)☆33Updated 5 years ago
- Random hunting ordiented yara rules☆98Updated 2 years ago
- A repository that maps API calls to Sysmon Event ID's.☆121Updated 3 years ago
- Automatically create YARA rules from malicious documents.☆212Updated 3 years ago
- ☆168Updated 5 years ago
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆91Updated 3 years ago
- c2 traffic☆194Updated 3 years ago
- A CALDERA plugin☆80Updated this week
- Sysmon EDR POC Build within Powershell to prove ability.☆226Updated 4 years ago
- Research indicators and detection rules☆67Updated 2 years ago
- Automatic YARA rule generation for Malpedia☆167Updated 3 years ago
- Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules☆50Updated 2 years ago
- Open Dataset of Cobalt Strike Beacon metadata (2018-2022)☆133Updated 3 years ago
- Links to malware-related YARA rules☆15Updated 3 years ago
- ☆42Updated 3 years ago
- Blueteam operational triage registry hunting/forensic tool.☆149Updated 5 months ago
- Cuckoo running in a nested hypervisor☆128Updated 5 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆97Updated last week
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation☆82Updated last week
- Sigma rules from Joe Security☆230Updated last year
- ☆46Updated 2 years ago
- Sigma Detection Rule Repository☆92Updated 5 years ago
- A YARA Rule Performance Measurement Tool☆61Updated last year