Alternatives and similar repositories for Loki-RS

Users that are interested in Loki-RS are comparing it to the libraries listed below

• cgosec / Blauhaunt
  A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you com…
  ☆180Updated 8 months ago
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆151Updated last year
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆271Updated this week
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆103Updated 2 weeks ago
• M00NLIG7 / ChopChopGo
  Rapidly Search and Hunt through Linux Forensics Artifacts
  ☆201Updated 2 years ago
• netskopeoss / NetskopeThreatLabsIOCs
  ☆151Updated 3 months ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆143Updated last month
• mthcht / ThreatIntel-Reports
  Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports
  ☆147Updated this week
• BushidoUK / Ransomware-Vulnerability-Matrix
  A collection of CVEs weaponized by ransomware operators
  ☆129Updated 3 months ago
• Yamato-Security / suzaku
  Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
  ☆164Updated last month
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆126Updated last year
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆158Updated 8 months ago
• AttackIQ / SigmAIQ
  A pySigma wrapper and langchain toolkit for automatic rule creation/translation
  ☆90Updated 2 months ago
• krdmnbrk / AttackRuleMap
  Mapping of open-source detection rules and atomic tests.
  ☆193Updated last year
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆213Updated this week
• MalBeacon / what-is-this-stealer
  A repository of credential stealer formats
  ☆239Updated 7 months ago
• Neo23x0 / god-mode-rules
  God Mode Detection Rules
  ☆135Updated last year
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆194Updated this week
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated 2 years ago
• magicsword-io / LOLRMM
  LotL RMM
  ☆280Updated this week
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆123Updated 11 months ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆138Updated last week
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆168Updated last month
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆65Updated last year
• lawndoc / Respotter
  Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.
  ☆197Updated 2 months ago
• splunk / ShellSweep
  ShellSweeping the evil.
  ☆181Updated last year
• The-DFIR-Report / DFIR-Artifacts
  Repository for sharing examples of our artifacts data and for use in new analyst recruitment.
  ☆108Updated 9 months ago
• tsale / awesome-dfir-skills
  A curated collection of DFIR skills and workflows for InfoSec practitioners.
  ☆214Updated last week
• The-DFIR-Report / Yara-Rules
  ☆78Updated 3 months ago
• mthcht / Purpleteam
  Purpleteam scripts simulation & Detection - trigger events for SOC detections
  ☆192Updated last year