SigmaHQ / sigma-cli
The Sigma command line interface based on pySigma
☆146Updated 2 weeks ago
Alternatives and similar repositories for sigma-cli:
Users that are interested in sigma-cli are comparing it to the libraries listed below
- pySigma Elasticsearch backend☆50Updated last week
- Sigma rule specification☆127Updated last week
- Rules generated from our investigations.☆193Updated this week
- A repository of my own Sigma detection rules.☆157Updated 6 months ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆109Updated last month
- An opensource sigma conversion tool built using pysigma☆119Updated 2 months ago
- pySigma Splunk backend☆36Updated 2 weeks ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated last month
- Automated YARA Rule Standardization and Quality Assurance Tool☆196Updated this week
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆142Updated 3 weeks ago
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆165Updated this week
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆132Updated last year
- ☆67Updated 2 weeks ago
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆76Updated last week
- MISP Playbooks☆186Updated last month
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆122Updated 7 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated this week
- ☆93Updated 2 years ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆107Updated last year
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆433Updated this week
- Resources To Learn And Understand SIGMA Rules☆173Updated 2 years ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆61Updated 10 months ago
- Harness the power of Splunk for your investigations☆93Updated 3 months ago
- OSSEM Detection Model☆175Updated 2 years ago
- A repository to share publicly available Velociraptor detection content☆136Updated this week
- Forensic Artifact Collection Tool Matrix☆84Updated 4 months ago
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆76Updated 4 months ago
- SOARCA - The Open Source CACAO-based Security Orchestrator!☆69Updated last week
- Memory Forensic System on Cloud☆89Updated last year
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆350Updated last month