Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.
☆28Oct 16, 2026Updated last week
Alternatives and similar repositories for rustinel-rules
Users that are interested in rustinel-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account requi…☆513Updated this week
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated last week
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Generate malware traces for detection tests☆19Oct 13, 2026Updated last week
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆40Jul 20, 2026Updated 3 months ago
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆42Oct 15, 2026Updated last week
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 4 months ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆172Updated this week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆65Sep 28, 2026Updated 3 weeks ago
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆38May 22, 2026Updated 5 months ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for secu…☆10Mar 13, 2024Updated 2 years ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Apr 22, 2021Updated 5 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆92Sep 14, 2026Updated last month
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 5 years ago
- Open YARA scan- and search engine☆27Feb 23, 2025Updated last year
- Scripts for TheHive.☆23Nov 15, 2019Updated 6 years ago
- Terraform Provider for the Apple Business/School Manager API☆27Oct 13, 2026Updated last week
- A modular PCAP forensics tool☆15Oct 11, 2026Updated last week
- Some YARA rules i will add from time to time☆68Mar 25, 2023Updated 3 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆28Oct 23, 2020Updated 6 years ago
- Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-p…☆19Sep 2, 2026Updated last month
- ☆23Dec 15, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆31Nov 25, 2025Updated 10 months ago
- ☆24Jul 7, 2023Updated 3 years ago
- Collection of my own detection rules☆19Updated this week
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆75Jun 17, 2026Updated 4 months ago
- Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OSCAL, validate with Trestle and oscal-cli, FedRA…☆16Aug 4, 2026Updated 2 months ago
- ☆34Apr 29, 2026Updated 5 months ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 5 months ago