Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.
☆21Jul 14, 2026Updated this week
Alternatives and similar repositories for rustinel-rules
Users that are interested in rustinel-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSO…☆425Updated this week
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆72Jun 17, 2026Updated 3 weeks ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆16May 31, 2026Updated last month
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆37May 22, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 4 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆57Mar 5, 2026Updated 4 months ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 2 years ago
- ☆21May 15, 2026Updated last month
- Advanced Windows authentication token extraction and decryption tool for red team operations and security research☆100Apr 1, 2026Updated 3 months ago
- LLM benchmark results for THOR forensic finding triage quality☆25Updated this week
- A practical client for ADWS in Golang.☆54Jun 26, 2026Updated 2 weeks ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- A native macOS client built with Swift for Apple Business Manager (ABM) and Apple School Manager (ASM) APIs, revolutionizing device manag…☆77Apr 16, 2026Updated 2 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A thin Python wrapper around netexec (nxc) that runs the same target/credential pair across many nxc protocols in a single command, with …☆18May 10, 2026Updated 2 months ago
- Yara rules☆21Mar 27, 2023Updated 3 years ago
- ☆34Apr 29, 2026Updated 2 months ago
- A collection of typical false positive indicators☆56Dec 5, 2020Updated 5 years ago
- Misery Loader to bypass modern EDR solutions☆19Dec 20, 2024Updated last year
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆18May 27, 2026Updated last month
- Arbitrary file read exploit for the Windows UPnP Device Host service.☆20Jun 5, 2026Updated last month
- Some YARA rules i will add from time to time☆70Mar 25, 2023Updated 3 years ago
- A modern C2 framework for authorized red team operations☆50Jun 12, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Python Library for ConfigExtractor☆16Jun 5, 2026Updated last month
- Solve problems of device identity, certificates and the keychain.☆13Jan 3, 2019Updated 7 years ago
- LLM Agent Skill for YARA rule authoring and review☆60Feb 8, 2026Updated 5 months ago
- ☆13Jan 17, 2025Updated last year
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆94Updated this week
- Burp Suite extension for Radamsa-powered fuzzing with Intruder☆21Mar 26, 2022Updated 4 years ago
- AI Guided Hybrid Application Static Testing☆76Updated this week
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- AutoPkg Wizard - a macOS SwiftUI app for managing AutoPkg☆38Jun 25, 2026Updated 2 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A personal RAG system for offensive security knowledge☆18Updated this week
- Linux Persistence Detection, Hunting and Artifact Collection script☆24May 21, 2026Updated last month
- A logging ASKPASS binary☆29May 29, 2020Updated 6 years ago
- A list of IOCs applicable to PoshC2☆24Aug 3, 2020Updated 5 years ago
- Convert Sigma rules to Wazuh rules☆77Sep 13, 2025Updated 10 months ago
- P2P Communications of Named Pipes☆12Dec 11, 2025Updated 7 months ago
- A proxy to fan out a single request to multiple prometheus servers and merge the responses☆12Feb 22, 2019Updated 7 years ago