Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.
☆29Nov 10, 2026Updated this week
Alternatives and similar repositories for rustinel-rules
Users that are interested in rustinel-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account requi…☆532Updated this week
- Self-hosted multi-engine Sigma detection for event logs☆46Nov 1, 2026Updated last week
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- ☆11Aug 10, 2021Updated 5 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The self-hosted KQL query management platform for SOC teams☆23May 20, 2026Updated 5 months ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 3 months ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Oct 30, 2026Updated last week
- Static + live analysis of Windows kernel drivers: extract IOCTL codes and shared ring-buffer strings, then load the driver and verify eve…☆27Aug 24, 2026Updated 2 months ago
- Generate malware traces for detection tests☆21Updated this week
- A complete Sigma detection engineering toolkit: parser, linter, formatter, evaluator, correlation engine, conversion framework, streaming…☆187Updated this week
- A collection of shellcode hashes☆16Aug 15, 2018Updated 8 years ago
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Updated this week
- Just a simple network/packet analyzer written in rust.☆12Aug 10, 2025Updated last year
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆40Jul 20, 2026Updated 3 months ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- ☆11Jun 18, 2024Updated 2 years ago
- ☆17Aug 30, 2025Updated last year
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- REA (Reverse Engineer Anything) in Docker: one image per analysis engine (Ghidra / Hopper / IDA) with a full reverse-engineering toolchai…☆20Updated this week
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆38May 22, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆67Oct 29, 2026Updated 2 weeks ago
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- Prism Infosec Malware Analysis Lab☆12Sep 11, 2025Updated last year
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Apr 22, 2021Updated 5 years ago
- A collection of typical false positive indicators☆55Dec 5, 2020Updated 5 years ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- ☆12Jan 17, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 5 years ago
- EventHorizon is an open-source multiprotocol IoT tarpit framework designed to emulate commonly abused IoT services such as Telnet, SSH, M…☆14Aug 15, 2026Updated 2 months ago
- Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for secu…☆10Mar 13, 2024Updated 2 years ago
- Scripts for TheHive.☆23Nov 15, 2019Updated 6 years ago
- Open YARA scan- and search engine☆27Feb 23, 2025Updated last year
- Automate eMASS records management via CLI.☆14Oct 27, 2026Updated 2 weeks ago
- A Python script for indexing (putting) FireEye alert data into Elasticsearch...and notifying you too.☆16Dec 11, 2018Updated 7 years ago
Are these results useful?