Yamato-Security / sigma-to-hayabusa-converter
Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.
☆11Updated last month
Alternatives and similar repositories for sigma-to-hayabusa-converter:
Users that are interested in sigma-to-hayabusa-converter are comparing it to the libraries listed below
- ☆18Updated 4 months ago
- Parser for Windows PowerShell script block logs☆13Updated 2 months ago
- ☆22Updated 5 months ago
- Hundred Days of Yara Challenge☆12Updated 2 years ago
- Offline-viewer for registry files☆11Updated 6 months ago
- Hunt for SQLite files used by various applications☆23Updated this week
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆26Updated 2 years ago
- A collection of tools adversaries commonly use in an attack.☆14Updated 4 months ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- An experimental Velociraptor implementation using cloud infrastructure☆24Updated this week
- Parser for Sdba memory pool tags☆18Updated 3 years ago
- ☆15Updated 3 years ago
- VTC - Velociraptor Timeline Creator☆15Updated 10 months ago
- Quick ESXi Log Parser☆16Updated 2 months ago
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆15Updated last month
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 3 years ago
- Autopsy Module to analyze Registry Hives☆15Updated 3 years ago
- ☆17Updated 7 months ago
- Indicators of Normality☆12Updated 2 years ago
- This repository contains generated contextual data utilized by pyattck.☆19Updated 3 weeks ago
- Collection of generic YARA rules☆15Updated 9 months ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆15Updated last year
- Over 100K open-source YARA signatures evaluated against over 280K files to give insights into the performance of each YARA rule.☆23Updated 2 years ago
- A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.☆34Updated 8 months ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- External telegram feeder for AIL framework☆13Updated last month
- NTFS file system specimens☆13Updated last year
- Linux #rootkit and #malware revealer☆24Updated 7 months ago
- This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…☆27Updated last month
- Zeek Profinet I/O Context Manager Parser - CISA ICSNPP☆10Updated 5 months ago