Validates Sigma rules using the JSON schema
☆24Apr 24, 2026Updated 3 months ago
Alternatives and similar repositories for sigma-rules-validator
Users that are interested in sigma-rules-validator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Sep 24, 2024Updated last year
- pySigma Splunk backend☆44Mar 22, 2026Updated 4 months ago
- ☆18Oct 13, 2025Updated 10 months ago
- The home of the SDDLMaker☆29Jan 13, 2025Updated last year
- ☆15Jun 15, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Golang based web service to scan files with yara rules☆25Jul 6, 2017Updated 9 years ago
- Tools used by CSIRT and especially in the scope of CNW☆18Feb 26, 2026Updated 5 months ago
- Bring Your Own Mitre Att&ck © Matrix !☆13Oct 19, 2023Updated 2 years ago
- Official Website Of The Sigma Project☆23Jun 16, 2026Updated last month
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- This repository provide a json file for all Windows security Event IDs with lot of useful informations (Categories, GPO, Volume, Recomman…☆11Mar 2, 2023Updated 3 years ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆32May 21, 2026Updated 2 months ago
- ☆58Dec 13, 2025Updated 8 months ago
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆97Nov 3, 2025Updated 9 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆584Updated this week
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- Scans the filesystem for directories that are user-writeable☆13Jun 21, 2021Updated 5 years ago
- A PowerShell module for incident response and threat hunting.☆38May 23, 2024Updated 2 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆15Updated this week
- Detection Rule License (DRL)☆23Dec 27, 2024Updated last year
- ☆16May 27, 2019Updated 7 years ago
- ☆16Feb 22, 2026Updated 5 months ago
- Generate malware traces for detection tests☆16Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Convert Sigma rules to SIEM queries, directly in your browser.☆122Jun 20, 2026Updated last month
- A running list of Windows sources and the related event ids.☆19Aug 2, 2023Updated 3 years ago
- ☆77Apr 3, 2025Updated last year
- MalwareAnalysis☆12Dec 19, 2020Updated 5 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Mar 11, 2026Updated 5 months ago
- intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; inclu…☆42Mar 17, 2019Updated 7 years ago
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 6 months ago
- Repository for Ludus french templates☆27Jun 28, 2026Updated last month
- 🍛 TypeScript Options-object Currying☆13Dec 9, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- pySigma Elasticsearch backend☆74Updated this week
- ☆10Dec 28, 2015Updated 10 years ago
- Simple reverse ICMP shell☆15Apr 30, 2024Updated 2 years ago
- An opensource sigma conversion tool built using pysigma☆174Updated this week
- Windows hidden thread suspend POC with code injection☆11May 27, 2017Updated 9 years ago
- Authenticode for PNG files☆11Jun 8, 2020Updated 6 years ago
- Expand CIDRs or wrangle a list of IPs back to its smallest CIDR blocks possible☆10Apr 5, 2020Updated 6 years ago