A Compiler from Sigma rules to VQL
☆21Oct 19, 2026Updated 2 weeks ago
Alternatives and similar repositories for velociraptor-sigma-rules
Users that are interested in velociraptor-sigma-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hunt the windows Registry automatically using VQL☆18Updated this week
- Construct triage artifact based on rules☆20Oct 14, 2026Updated 2 weeks ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- Documentation site for Velociraptor☆75Updated this week
- Indicators of compromise☆19May 18, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 11 months ago
- A library implementing a generic SQL like query language.☆22Aug 20, 2026Updated 2 months ago
- Draugnet is a lightweight, open-source tool for anonymous cyber threat reporting. Built for the MISP ecosystem, it lets users submit and …☆21Jul 8, 2026Updated 3 months ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆87Jan 6, 2026Updated 9 months ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Hunt for SQLite files used by various applications☆33Oct 15, 2026Updated 2 weeks ago
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 6 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- Automatic YARA rule generation for Malpedia☆170Sep 8, 2022Updated 4 years ago
- ☆11Jun 18, 2024Updated 2 years ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆30Jul 20, 2026Updated 3 months ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆37Feb 2, 2022Updated 4 years ago
- This directory contains presentations and related materials of my speaking engagements. I also use this to record historical presentation…☆18Feb 13, 2025Updated last year
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆122Oct 8, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36Oct 25, 2026Updated last week
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- A repository to share publicly available Velociraptor detection content☆210Updated this week
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆167Oct 25, 2026Updated last week
- ☆12Aug 7, 2025Updated last year
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆37Nov 27, 2025Updated 11 months ago
- ☆15Oct 25, 2026Updated last week
- A specification and style guide for YARA rules☆81Feb 17, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Oct 25, 2026Updated last week
- CLI generator for Velociraptor offline collector☆17Sep 15, 2026Updated last month
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 11 months ago
- ☆14Jun 15, 2026Updated 4 months ago
- A pySigma wrapper to manage detection rules.☆47Oct 1, 2026Updated last month
- ☆13Apr 2, 2022Updated 4 years ago
- Placeholder for my detection repo and misc detection engineering content☆44Oct 20, 2023Updated 3 years ago