Generic Signature Format for SIEM Systems
☆14Oct 27, 2021Updated 5 years ago
Alternatives and similar repositories for sigma
Users that are interested in sigma are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆34Jun 22, 2021Updated 5 years ago
- Packer scripts for creation of Windows images with cloudbase-init☆15Jan 29, 2024Updated 2 years ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆134Oct 17, 2020Updated 6 years ago
- Caldera plugin to deploy "humans" to emulate user behavior on systems☆35Jun 10, 2026Updated 4 months ago
- OSSEM Data Dictionaries☆68Jan 22, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- pcaps for Wireshark tutorial about examining Dridex infection traffic☆18Oct 8, 2020Updated 6 years ago
- Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.☆39Dec 17, 2025Updated 10 months ago
- A skeleton project for quickly getting a new cisagov Docker container started.☆22Oct 25, 2026Updated last week
- Python module to use the MISP Taxonomies☆31Oct 26, 2026Updated last week
- ☆10Jun 20, 2023Updated 3 years ago
- Web app that provides basic navigation and annotation of ATLAS matrices, based on the ATT&CK Navigator☆15Jun 24, 2024Updated 2 years ago
- Search a domain on VirusTotal to identify if any known malware samples have ever attempted to communicate with it☆10Jan 25, 2016Updated 10 years ago
- Landing Page Content/Builder for MITRE Security Automation Framework☆29Sep 16, 2026Updated last month
- Trends data from OTX and scripts to get the data☆10Apr 11, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of notebooks built for defensive and offensive operations.☆77Oct 13, 2020Updated 6 years ago
- All my slides for any talks☆23Oct 13, 2024Updated 2 years ago
- Elastic Site Search Official Python Client☆10Jun 23, 2026Updated 4 months ago
- A docker container for openvas☆68Jan 1, 2021Updated 5 years ago
- Creating an ATT&CK Navigator layer with the detection coverage of the signals available within Tanium Threat Response.☆11Jun 2, 2021Updated 5 years ago
- Python module to interact with the MITRE attack framework via the MITRE API☆91Nov 14, 2017Updated 8 years ago
- An analytical framework for network traffic and behavioral analytics☆22Feb 23, 2023Updated 3 years ago
- Stout is a drop-in replacement for the Homebrew CLI that's 10-100x for most operations.☆14Sep 29, 2026Updated last month
- Script to mass deauthenticate multiple wireless clients.☆12Jan 1, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OpenCTI Documentation Space☆27Dec 18, 2025Updated 10 months ago
- Swift code to parse the quarantine history database, Chrome history database, Safari history database, and Firefox history database on ma…☆16Dec 3, 2020Updated 5 years ago
- Automated PowerSTIG Repository for Active Directory environments☆43Nov 28, 2022Updated 3 years ago
- ☆10Mar 24, 2022Updated 4 years ago
- Threat Hunting with Jupyter Notebooks on Taegis☆14Sep 25, 2023Updated 3 years ago
- Data Analytics Library for Python☆17Updated this week
- The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activ…☆17Jun 25, 2025Updated last year
- Training and support materials for MSTICPy☆18Jun 27, 2023Updated 3 years ago
- Azure-Sentinel-BYOML☆14Nov 8, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆13Jun 1, 2021Updated 5 years ago
- This repository contains generated contextual data utilized by pyattck.☆19Mar 3, 2025Updated last year
- MISP Workbench☆27Oct 19, 2016Updated 10 years ago
- ☆17Mar 28, 2023Updated 3 years ago
- A tool to run a command when the target of a symlink changes☆16Apr 28, 2016Updated 10 years ago
- Extract common Windows artifacts from source images and VSCs☆66May 10, 2021Updated 5 years ago
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Apr 26, 2017Updated 9 years ago