A Compiler from Sigma rules to VQL
☆19May 18, 2026Updated 2 months ago
Alternatives and similar repositories for velociraptor-sigma-rules
Users that are interested in velociraptor-sigma-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hunt the windows Registry automatically using VQL☆18May 4, 2026Updated 2 months ago
- Construct triage artifact based on rules☆15Jun 18, 2026Updated last month
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 2 months ago
- Documentation site for Velociraptor☆73Updated this week
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆83Jan 6, 2026Updated 6 months ago
- Draugnet is a lightweight, open-source tool for anonymous cyber threat reporting. Built for the MISP ecosystem, it lets users submit and …☆21Jul 8, 2026Updated 2 weeks ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Jun 25, 2026Updated last month
- Sigma detection rules for hunting with the threathunting-keywords project☆60Mar 2, 2025Updated last year
- Linux Persistence Detection, Hunting and Artifact Collection script☆24Updated this week
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36May 11, 2026Updated 2 months ago
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 3 months ago
- Indicators of compromise☆20May 18, 2026Updated 2 months ago
- This directory contains presentations and related materials of my speaking engagements. I also use this to record historical presentation…☆18Feb 13, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Takajō (鷹匠) is a Hayabusa results analyzer.☆162Jul 11, 2026Updated 2 weeks ago
- ☆12Apr 2, 2022Updated 4 years ago
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆22Apr 16, 2021Updated 5 years ago
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- AIL project training materials☆39Apr 21, 2026Updated 3 months ago
- A repository to share publicly available Velociraptor detection content☆205Updated this week
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Oct 22, 2025Updated 9 months ago
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 8 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆122Oct 8, 2023Updated 2 years ago
- ☆15Jun 15, 2026Updated last month
- A specification and style guide for YARA rules☆76Feb 17, 2024Updated 2 years ago
- CocktailParty is a data broker system based on phoenix framework☆23Apr 23, 2025Updated last year
- Placeholder for my detection repo and misc detection engineering content☆43Oct 20, 2023Updated 2 years ago
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆93Jun 28, 2026Updated 3 weeks ago
- A pySigma wrapper to manage detection rules.☆46Jun 3, 2026Updated last month
- Hunt for SQLite files used by various applications☆31Jun 17, 2026Updated last month
- ☆21Nov 19, 2025Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows Event Log "Microsoft-Windows-Partition%4Diagnostic.evtx" parser and devices' VSNs extractor.☆20Nov 28, 2023Updated 2 years ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 2 years ago
- Detection in the form of Yara, Snort and ClamAV signatures.☆256Nov 1, 2024Updated last year
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- This repository contains generated contextual data utilized by pyattck.☆19Mar 3, 2025Updated last year
- This repository contains various threat hunting tools written in Python and is documented in the series Python Threat Hunting Tools which …☆19Nov 16, 2023Updated 2 years ago
- Convert Sigma rules to Wazuh rules☆77Sep 13, 2025Updated 10 months ago