☆42Sep 16, 2022Updated 4 years ago
Alternatives and similar repositories for gene-rules
Users that are interested in gene-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Signature engine for all your logs☆172Nov 13, 2023Updated 2 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆23Mar 30, 2026Updated 7 months ago
- ssdeep cluster analysis for malware files☆32Jun 5, 2020Updated 6 years ago
- Trace ScriptBlock execution for powershell v2☆40Jan 14, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Provides a multi-platform Graphical User Interface for hashlookup☆12Jul 12, 2024Updated 2 years ago
- Sandbox samples and monitor them with kunai☆32Jul 21, 2026Updated 3 months ago
- Open Source EDR for Windows☆1,319Feb 25, 2023Updated 3 years ago
- Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format☆14Sep 13, 2016Updated 10 years ago
- Python CLI and module for CIRCL hash lookup☆14Jul 9, 2025Updated last year
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- Checks observables/ioc in TheHive/Cortex against the MISP warningslists☆14Dec 27, 2017Updated 8 years ago
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Apr 26, 2017Updated 9 years ago
- Splunk Searches and Dashboards for DNS Threat Hunting☆11Mar 5, 2018Updated 8 years ago
- ☆171Nov 11, 2022Updated 3 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- Sysmon EDR POC Build within Powershell to prove ability.☆229May 1, 2021Updated 5 years ago
- Built for the frontlines of cyber defense, our next-generation MISP empowers edge deployments and threat hunters with fast, lightweight, …☆36Updated this week
- Reconstruct process trees from event logs☆148Aug 12, 2020Updated 6 years ago
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- Query and report user logons relations from MS Windows Security Events☆242Aug 9, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Anything Sysmon related from the MSTIC R&D team☆157Jun 8, 2024Updated 2 years ago
- ☆23Aug 1, 2020Updated 6 years ago
- Build Automated Machine Images for MISP☆29Jun 9, 2023Updated 3 years ago
- Bro integration with osquery☆15Mar 24, 2023Updated 3 years ago
- ☆11Jun 18, 2024Updated 2 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Jun 11, 2020Updated 6 years ago
- Klara docker compose☆11May 19, 2020Updated 6 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Telsy CTI Research Team☆57Dec 15, 2020Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Extract information from MISP via the API☆16Jul 18, 2016Updated 10 years ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Apr 22, 2021Updated 5 years ago
- A service designed to provide users with a set of intuitive web forms for reporting various types of cyber attack to MISP.☆11Jun 4, 2025Updated last year
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆40Mar 18, 2022Updated 4 years ago
- Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)☆24Mar 30, 2026Updated 7 months ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆37Feb 2, 2022Updated 4 years ago
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago