Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.
☆16Oct 25, 2026Updated this week
Alternatives and similar repositories for sigma-to-hayabusa-converter
Users that are interested in sigma-to-hayabusa-converter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆22Aug 13, 2026Updated 2 months ago
- A fork of the evtx Rust crate for Hayabusa☆15Oct 8, 2026Updated 3 weeks ago
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- ☆15Updated this week
- Offline, open-source AWS CloudTrail DFIR & threat hunting platform — 120+ built-in hunts, 100+ Superset dashboard charts, AI chat, and an…☆24Oct 18, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆24Oct 9, 2024Updated 2 years ago
- Windows Event Log "Microsoft-Windows-Partition%4Diagnostic.evtx" parser and devices' VSNs extractor.☆20Nov 28, 2023Updated 2 years ago
- Sample evtx files to use for testing hayabusa detection rules☆71Nov 5, 2025Updated 11 months ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆166Updated this week
- Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security f…☆13Updated this week
- Windows Event Log Knowledge Base☆36Sep 27, 2026Updated last month
- Power-Forensics is the Best Friend for Incident Responders to perform IR and collect evidences for Linux based host☆12Jun 2, 2023Updated 3 years ago
- AI analyzer for Hayabusa results.☆28Updated this week
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆17Oct 21, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This crate provides functions for working with IPv4 CIDRs and IPv6 CIDRs.☆35Sep 14, 2026Updated last month
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- A dataset with CloudTrail events from an attack simulation using Stratus.☆29Jul 12, 2023Updated 3 years ago
- A Rust library for parsing and evaluating Sigma rules☆24Nov 26, 2025Updated 11 months ago
- WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital s…☆126Oct 1, 2026Updated 3 weeks ago
- ☆25Feb 13, 2021Updated 5 years ago
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆230Updated this week
- A Compiler from Sigma rules to VQL☆20Oct 19, 2026Updated last week
- Harness the power of Splunk for your investigations☆172Oct 6, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated last week
- 「Rustで始めるネットワークプログラミング」 第5章（web販売版: web-versionブランチ）のリポジトリです。☆11May 8, 2020Updated 6 years ago
- ログ分析トレーニング バージョン2☆32Feb 10, 2026Updated 8 months ago
- A secure computation by secret sharing scheme for multiplication☆11May 4, 2022Updated 4 years ago
- Sample WinDbg command & UI extensions.☆15Sep 28, 2026Updated last month
- Field guide to gather low-hanging fruits☆16Mar 20, 2025Updated last year
- Different code-injections techniques under a common tool☆30May 3, 2020Updated 6 years ago
- Integrate a DASH7 gateway with the ThingsBoard platform☆10Oct 10, 2018Updated 8 years ago
- 日本でNixを利用している会社一覧☆11Mar 28, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collection of over 9000 xss payloads | heavy xss collection☆12Dec 6, 2022Updated 3 years ago
- Nancy - Nim fancy ANSI tables☆57May 5, 2023Updated 3 years ago
- A bare-bones console logger for Sublime Text 2 and 3.☆12Dec 2, 2016Updated 9 years ago
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago
- LLM benchmark results for THOR forensic finding triage quality☆28Updated this week
- ☆25Oct 9, 2024Updated 2 years ago
- Nim library to parse ANSI escape codes☆11Aug 8, 2023Updated 3 years ago