Alternatives and similar repositories for cookiecutter-pySigma-backend

Users that are interested in cookiecutter-pySigma-backend are comparing it to the libraries listed below

• certeu / droid
  A pySigma wrapper to manage detection rules.
  ☆39Updated 3 weeks ago
• 00010111 / smbtimeline
  ☆35Updated 8 months ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆79Updated last month
• center-for-threat-informed-defense / summiting-the-pyramid
  Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…
  ☆41Updated last month
• OTRF / infosec-jupyterthon
  A community event for security researchers to share their favorite notebooks
  ☆107Updated last year
• cyentific-rni / security-playbook-stix-misp-exchange
  This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…
  ☆16Updated 2 years ago
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆77Updated 4 years ago
• P4T12ICK / Sigma-Rule-Repository
  Sigma Detection Rule Repository
  ☆88Updated 5 years ago
• opencybersecurityalliance / oca-iob
  Augmentation to Machine Readable CTI
  ☆31Updated last month
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆53Updated 2 years ago
• Digital-Defense-Institute / triage.zip
  A preconfigured Velociraptor triage collector
  ☆52Updated last week
• ReconInfoSec / velociraptor-to-timesketch
  ☆8Updated 8 months ago
• splunk / attack-detections-collector
  Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique
  ☆67Updated last year
• AttackIQ / pySigma-backend-kusto
  ☆41Updated 6 months ago
• thremulation-station / thremulation-station
  Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.
  ☆38Updated last year
• SigmaHQ / pySigma-backend-splunk
  pySigma Splunk backend
  ☆39Updated last month
• LogRhythm-Labs / Sigma
  Convert Sigma rules to LogRhythm searches
  ☆21Updated 3 years ago
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆57Updated 3 years ago
• northsh / detection.studio
  Convert Sigma rules to SIEM queries, directly in your browser.
  ☆89Updated last week
• korniko98 / pivot-atlas
  ☆92Updated last month
• mgreen27 / mcp-velociraptor
  VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.
  ☆36Updated last week
• AttackIQ / SigmAIQ
  A pySigma wrapper and langchain toolkit for automatic rule creation/translation
  ☆81Updated last month
• APTA-Technologies / APTAAnomaly
  Windows event log anomaly detection powered by ATPA technologies
  ☆26Updated 2 years ago
• blueteam0ps / det-eng-samples
  This repository contains sample log data that were collected after running adversary simulations in Microsoft 365
  ☆21Updated 8 months ago
• cyentific-rni / stix2.1-coa-playbook-extension
  A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…
  ☆23Updated last year
• SigmaHQ / pySigma-backend-crowdstrike
  SigmaHQ pySigma CrowdStrike processing pipeline
  ☆26Updated 8 months ago
• humpalum / vscode-sigma
  ☆16Updated 3 months ago
• invoke-eric / jupyter
  Jupyter Notebooks for Cyber Threat Intelligence
  ☆35Updated last year
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆78Updated 3 years ago
• The-DFIR-Report / Yara-Rules
  ☆68Updated 4 months ago