Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.
☆23Aug 1, 2026Updated this week
Alternatives and similar repositories for rustinel-rules
Users that are interested in rustinel-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSO…☆445Updated this week
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 2 months ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆37May 22, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆57Mar 5, 2026Updated 4 months ago
- ☆18Aug 30, 2025Updated 11 months ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago
- Everything related to YARA☆16Apr 18, 2026Updated 3 months ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- Yara rules☆21Mar 27, 2023Updated 3 years ago
- ☆21May 15, 2026Updated 2 months ago
- LLM benchmark results for THOR forensic finding triage quality☆25Updated this week
- Terraform Provider for the Apple Business/School Manager API☆25Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A collection of typical false positive indicators☆56Dec 5, 2020Updated 5 years ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 5 months ago
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 4 years ago
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆74Jun 17, 2026Updated last month
- ☆34Apr 29, 2026Updated 3 months ago
- A thin Python wrapper around netexec (nxc) that runs the same target/credential pair across many nxc protocols in a single command, with …☆18May 10, 2026Updated 2 months ago
- List of resources for macOS Client Platform Engineering.☆12Apr 17, 2025Updated last year
- Some YARA rules i will add from time to time☆69Mar 25, 2023Updated 3 years ago
- ☆23Dec 15, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-p…☆18Jun 20, 2026Updated last month
- Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and Mythic agents running on compromised hosts.☆17Updated this week
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 2 months ago
- ☆15Apr 28, 2026Updated 3 months ago
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆18May 27, 2026Updated 2 months ago
- ☆13Jan 17, 2025Updated last year
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- BrowserConfigEditor is a macOS application that simplifies the creation and editing of browser policy configurations (MDM/management plis…☆34Jan 25, 2026Updated 6 months ago
- RE for champions☆17Jul 27, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Rust library for parsing and evaluating Sigma rules☆24Nov 26, 2025Updated 8 months ago
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆120Updated this week
- Collection of my own detection rules☆20Jan 6, 2026Updated 6 months ago
- Solve problems of device identity, certificates and the keychain.☆13Jan 3, 2019Updated 7 years ago
- YARA, SIGMA, SNORT Rules based on Malware Analysis☆17Apr 23, 2025Updated last year
- Script to parse Process Monitor XML log file, and give you a summary report.☆24May 4, 2016Updated 10 years ago
- A modern C2 framework for authorized red team operations☆54Jul 19, 2026Updated 2 weeks ago