Yamato-Security / sigma-to-hayabusa-converter
Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.
☆13Updated 3 months ago
Alternatives and similar repositories for sigma-to-hayabusa-converter
Users that are interested in sigma-to-hayabusa-converter are comparing it to the libraries listed below
Sorting:
- ☆18Updated last month
- An experimental Velociraptor implementation using cloud infrastructure☆25Updated this week
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- ☆22Updated 7 months ago
- A web scraper to create MISP events and reports☆14Updated last month
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Updated 2 years ago
- Hunt for SQLite files used by various applications☆25Updated last month
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆33Updated 2 weeks ago
- ESXi Cyber Security Incident Response Script☆24Updated 8 months ago
- Quick ESXi Log Parser☆19Updated 4 months ago
- Parser for Windows PowerShell script block logs☆13Updated 4 months ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆31Updated 3 months ago
- THOR Thunderstorm Collectors☆24Updated last month
- Tools and scripts to deploy and manage OpenRelik instances☆13Updated 2 months ago
- Detection rule validation☆41Updated last year
- Hundred Days of Yara Challenge☆12Updated 2 years ago
- ☆11Updated last year
- Contains compiled binaries of Volatility☆33Updated 3 months ago
- VTC - Velociraptor Timeline Creator☆18Updated last year
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 5 months ago
- ETW forensic tool for Volatility3 plugin☆13Updated 6 months ago
- This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…☆30Updated last month
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆63Updated 2 years ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆42Updated 3 weeks ago
- Baseline a Windows System against LOLBAS☆27Updated last year
- Bring Your Own Mitre Att&ck © Matrix !☆13Updated last year
- Reads and prints information from the website MalAPI.io☆19Updated 2 years ago
- ☆20Updated 2 months ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 3 years ago
- Open-source Fabric templates for cybersecurity and compliance☆18Updated 4 months ago