Alternatives and similar repositories for sigmalint:

Users that are interested in sigmalint are comparing it to the libraries listed below

• remg427 / misp42splunk
  A Splunk app to use MISP in background
  ☆110Updated 2 weeks ago
• cyentific-rni / cacao-json-schemas
  JSON schemas for validating CACAO Security Playbooks. Note: In December 2023, Cyentific AS offered and transferred the content of this re…
  ☆18Updated last year
• P4T12ICK / Sigma-Rule-Repository
  Sigma Detection Rule Repository
  ☆87Updated 4 years ago
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 3 years ago
• PaloAltoNetworks / ioc-parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆71Updated 8 months ago
• gertjanbruggink / metrics
  This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
  ☆109Updated 3 months ago
• eclecticiq / stix-icons
  stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats a…
  ☆34Updated 2 years ago
• MISP / misp-stix
  MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats
  ☆53Updated this week
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆77Updated 2 years ago
• syloktools / MISP-QRADAR-REFERENCE-SET-BUILDER
  Pulls IOCs from MISP and adds the to reference sets in QRadar
  ☆33Updated last year
• opencybersecurityalliance / cacao-roaster
  A web application for generating, parsing and validating, manipulating, and visualizing CACAO v2.0 playbooks.
  ☆26Updated 2 months ago
• MHaggis / CBR-Queries
  Collection of useful, up to date, Carbon Black Response Queries
  ☆83Updated 4 years ago
• k-bailey / detection-engineering-maturity-matrix
  ☆93Updated 2 years ago
• carbonblack / cb-yara-connector
  Analyze binaries collected in VMware Carbon Black EDR against Yara rules.
  ☆37Updated 2 years ago
• megan201296 / gsuite-dfir
  ☆42Updated 4 years ago
• sans-blue-team / freq.py
  Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…
  ☆125Updated 2 years ago
• joshlemon / DFIR-Reference-Frameworks
  Repository of public reference frameworks for the DFIR community.
  ☆115Updated last year
• flowintel / flowintel
  An open source platform to support analysts to organise their case and tasks
  ☆66Updated 2 weeks ago
• marcurdy / dfir-toolset
  Dump of organized knowledge on DFIR
  ☆133Updated 3 years ago
• neolea / neolea-training-materials
  Open source training materials for law-enforcement and organisations interested in DFIR.
  ☆56Updated last month
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆72Updated last year
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆76Updated 3 years ago
• TTP0 / ttp0_community_templates
  ☆32Updated last year
• P4T12ICK / Sigma-Hunting-App
  A Splunk App containing Sigma detection rules, which can be updated from a Git repository.
  ☆108Updated 5 years ago
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆53Updated last month
• davisshannon / Splunk-Sunburst
  Sunburst IOCs for Splunk Ingest
  ☆18Updated 4 years ago
• P4T12ICK / Sigma2SplunkAlert
  Converts Sigma detection rules to a Splunk alert configuration.
  ☆109Updated 4 years ago
• ReconInfoSec / velociraptor-to-timesketch
  ☆5Updated 4 months ago
• apger / SA-RBA
  Risk Based Alerting Supporting Add-On (SA) for Splunk
  ☆45Updated 3 years ago
• cerebrate-project / cerebrate
  Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…
  ☆85Updated 2 months ago