Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.
☆26Sep 29, 2026Updated this week
Alternatives and similar repositories for rustinel-rules
Users that are interested in rustinel-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account requi…☆496Updated this week
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆62Updated this week
- ☆17Aug 30, 2025Updated last year
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Everything related to YARA☆16Apr 18, 2026Updated 5 months ago
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆39May 22, 2026Updated 4 months ago
- Terraform Provider for the Apple Business/School Manager API☆26Updated this week
- A collection of typical false positive indicators☆56Dec 5, 2020Updated 5 years ago
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 4 years ago
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆74Jun 17, 2026Updated 3 months ago
- ☆34Apr 29, 2026Updated 5 months ago
- Some YARA rules i will add from time to time☆68Mar 25, 2023Updated 3 years ago
- ☆23Dec 15, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-p…☆19Sep 2, 2026Updated last month
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 4 months ago
- ☆15Apr 28, 2026Updated 5 months ago
- ☆13Jan 17, 2025Updated last year
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- BrowserConfigEditor is a macOS application that simplifies the creation and editing of browser policy configurations (MDM/management plis…☆34Jan 25, 2026Updated 8 months ago
- A Rust library for parsing and evaluating Sigma rules☆24Nov 26, 2025Updated 10 months ago
- Collection of my own detection rules☆20Jan 6, 2026Updated 8 months ago
- Solve problems of device identity, certificates and the keychain.☆13Jan 3, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- YARA, SIGMA, SNORT Rules based on Malware Analysis☆17Apr 23, 2025Updated last year
- Script to parse Process Monitor XML log file, and give you a summary report.☆24May 4, 2016Updated 10 years ago
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 8 months ago
- LLM benchmark results for THOR forensic finding triage quality☆28Updated this week
- P2P Communications of Named Pipes☆12Jul 30, 2026Updated 2 months ago
- AutoPkg Wizard - a macOS SwiftUI app for managing AutoPkg☆43Jun 25, 2026Updated 3 months ago
- ☆25May 15, 2026Updated 4 months ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- Apply a filter to the events being reported by windows event logging☆15Sep 10, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆32Jun 3, 2019Updated 7 years ago
- A collection of Tools and Rules for decoding Brute Ratel C4 badgers☆67Jul 7, 2022Updated 4 years ago
- Misery Loader to bypass modern EDR solutions☆19Dec 20, 2024Updated last year
- Microsoft Active Directory (AD) Awesome List☆33Sep 7, 2026Updated 3 weeks ago
- Python Library for ConfigExtractor☆16Jul 30, 2026Updated 2 months ago
- A multi-threaded malware sample downloader based upon given MD-5/SHA-1/SHA-256 hashes, using multiple malware databases.☆30Apr 14, 2023Updated 3 years ago
- a simple HTML/JQuery file upload system that is powered by node.js and MongoDB's GridFS☆13Aug 9, 2013Updated 13 years ago