Check Sigma rules for easy-to-bypass whitelists to make them more robust (https://github.com/SigmaHQ/sigma)
☆16Feb 1, 2021Updated 5 years ago
Alternatives and similar repositories for SigmaFilterCheck
Users that are interested in SigmaFilterCheck are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple ElasticSearch API for Golang☆15Dec 3, 2018Updated 7 years ago
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- Detection rules to look for Log4J usage and exploitation☆18Jun 21, 2025Updated last year
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆57Mar 18, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- MBC v2.x expressed in STIX 2.1 JSON☆17Oct 3, 2023Updated 3 years ago
- Sigma Engine implementation in TypeScript☆28Mar 5, 2023Updated 3 years ago
- Experimenting with eager evaluation of Go WASM code☆12Oct 22, 2018Updated 8 years ago
- 🌦️ Domain Ranker☆16Sep 7, 2019Updated 7 years ago
- Binarly SDK v1☆14Dec 18, 2016Updated 9 years ago
- QRadar Export the rule set for printing☆23Oct 23, 2017Updated 9 years ago
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆116May 18, 2020Updated 6 years ago
- Suricata rules to detect Winnti communication☆16Mar 5, 2018Updated 8 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpo…☆51Aug 15, 2019Updated 7 years ago
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- Kubernetes Kubelet RCE Automated Script. Utilizes both "run" and "exec" debug handlers.☆10Sep 28, 2020Updated 6 years ago
- Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.☆68Apr 12, 2022Updated 4 years ago
- Install and configure user mode auditd tools☆34Apr 17, 2026Updated 6 months ago
- ☆15Feb 12, 2023Updated 3 years ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Updated this week
- Capec interactive visualization using graph database and d3.js rendering library☆11Jun 12, 2017Updated 9 years ago
- This is a decoder for aaEncoded string. I hope it's useful for someone out there. aaEncode is originally made by @hasegawayosuke☆12Oct 16, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple bash script that does its best to automate and visualize differential benchmarking for Go projects.☆21Apr 23, 2018Updated 8 years ago
- Golang port of pefile☆25Jul 17, 2017Updated 9 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆70Mar 17, 2024Updated 2 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- An Elasticsearch QUEry Language☆58Jul 3, 2017Updated 9 years ago
- A YARA Rule Performance Measurement Tool☆64Feb 26, 2024Updated 2 years ago
- Sigma Detection Rule Repository☆93Jun 18, 2020Updated 6 years ago
- Tailwind UI Component CSS prefixer☆10Jun 22, 2020Updated 6 years ago
- ☆13Jul 30, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PE file format reader in JavaScript☆26Apr 10, 2019Updated 7 years ago
- parsers to make life easier☆13Aug 21, 2020Updated 6 years ago
- A portable console aimed at making pentesting with PowerShell a little easier.☆49Apr 4, 2017Updated 9 years ago
- A permissions system for Go structs☆15Feb 16, 2018Updated 8 years ago
- Assign ownership to files and directories and ensure that owners review changes☆15Jul 27, 2017Updated 9 years ago
- Deduplicate named and unnamed imports of the same import path in Go files☆18Oct 9, 2026Updated 3 weeks ago
- Swift code to programmatically execute local or hosted JXA payloads from Terminal without using the on-disk osascript binary.☆23Apr 22, 2021Updated 5 years ago