Yamato-Security / hayabusa-rules
Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
☆169Updated this week
Alternatives and similar repositories for hayabusa-rules:
Users that are interested in hayabusa-rules are comparing it to the libraries listed below
- Rules generated from our investigations.☆194Updated last month
- Sample evtx files to use for testing hayabusa detection rules☆52Updated 5 months ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆357Updated 3 months ago
- ☆127Updated 3 weeks ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆132Updated last year
- Harness the power of Splunk for your investigations☆99Updated 3 weeks ago
- A repository of my own Sigma detection rules.☆158Updated 7 months ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆115Updated this week
- An opensource sigma conversion tool built using pysigma☆124Updated 4 months ago
- Sigma rules to share with the community☆119Updated 2 months ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆236Updated last month
- OSSEM Detection Model☆177Updated 2 years ago
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆563Updated 3 months ago
- A repository to share publicly available Velociraptor detection content☆156Updated this week
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆150Updated 2 months ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆201Updated 2 years ago
- Welcome to the SEKOIA.IO Community repository!☆149Updated last week
- ☆68Updated 2 months ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆210Updated this week
- Sigma rules from Joe Security☆209Updated 5 months ago
- Sigma rule specification☆132Updated last month
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆109Updated last year
- Dettectinator - The Python library to your DeTT&CT YAML files.☆111Updated 2 weeks ago
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆78Updated 2 weeks ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆563Updated last month
- LOKI2 - Simple IOC and YARA Scanner☆92Updated 8 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆710Updated 2 weeks ago
- LotL RMM☆171Updated last month
- Anything Sysmon related from the MSTIC R&D team☆152Updated 10 months ago
- Active C&C Detector☆153Updated last year