Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.
☆25Sep 12, 2026Updated this week
Alternatives and similar repositories for rustinel-rules
Users that are interested in rustinel-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account requi…☆481Updated this week
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 3 months ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆61Mar 5, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆17Aug 30, 2025Updated last year
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago
- Everything related to YARA☆16Apr 18, 2026Updated 4 months ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- ☆24May 15, 2026Updated 3 months ago
- LLM benchmark results for THOR forensic finding triage quality☆27Sep 2, 2026Updated last week
- Terraform Provider for the Apple Business/School Manager API☆26Updated this week
- A collection of typical false positive indicators☆56Dec 5, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 4 years ago
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆74Jun 17, 2026Updated 2 months ago
- ☆34Apr 29, 2026Updated 4 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆34Feb 17, 2026Updated 6 months ago
- A thin Python wrapper around netexec (nxc) that runs the same target/credential pair across many nxc protocols in a single command, with …☆18May 10, 2026Updated 4 months ago
- Some YARA rules i will add from time to time☆68Mar 25, 2023Updated 3 years ago
- List of resources for macOS Client Platform Engineering.☆12Apr 17, 2025Updated last year
- ☆23Dec 15, 2022Updated 3 years ago
- Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-p…☆19Sep 2, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and Mythic agents running on compromised hosts.☆24Aug 26, 2026Updated 2 weeks ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 3 months ago
- ☆15Apr 28, 2026Updated 4 months ago
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆18May 27, 2026Updated 3 months ago
- ☆13Jan 17, 2025Updated last year
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- BrowserConfigEditor is a macOS application that simplifies the creation and editing of browser policy configurations (MDM/management plis…☆34Jan 25, 2026Updated 7 months ago
- Collection of my own detection rules☆20Jan 6, 2026Updated 8 months ago
- Solve problems of device identity, certificates and the keychain.☆13Jan 3, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆138Updated this week
- YARA, SIGMA, SNORT Rules based on Malware Analysis☆17Apr 23, 2025Updated last year
- A logging ASKPASS binary☆29May 29, 2020Updated 6 years ago
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated 10 months ago
- MCP server for analyzing PE, ELF, and Mach-O binaries using LIEF☆25Mar 6, 2026Updated 6 months ago
- Advanced post-exploitation framework designed for Red Team operations in Entra ID, Azure and Microsoft 365 environments.☆63Apr 1, 2026Updated 5 months ago
- Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a s…☆67Jul 10, 2026Updated 2 months ago