SigmaOptimizer is a Sigma rule generation and optimization tool that automatically creates, tests, and improves Sigma rules based on real-world logs. It is implemented as a PowerShell script and integrates log analysis, rule evaluation, and iterative refinement to enhance detection capabilities.
☆11Aug 1, 2025Updated last year
Alternatives and similar repositories for SigmaOptimizer
Users that are interested in SigmaOptimizer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆12Aug 7, 2025Updated last year
- Offline, open-source AWS CloudTrail DFIR & threat hunting platform — 120+ built-in hunts, 100+ Superset dashboard charts, AI chat, and an…☆24Updated this week
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Oct 25, 2026Updated last week
- ☆22Aug 13, 2026Updated 2 months ago
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆15Updated this week
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆25Oct 9, 2024Updated 2 years ago
- Windows Event Log "Microsoft-Windows-Partition%4Diagnostic.evtx" parser and devices' VSNs extractor.☆20Nov 28, 2023Updated 2 years ago
- disarmBot is a bot that uses the AG2 framework to automatically create multiple LLM Agents, discuss about disinformation, and respond to …☆20Nov 25, 2025Updated 11 months ago
- Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security f…☆13Oct 24, 2026Updated last week
- Windows Event Log Knowledge Base☆36Sep 27, 2026Updated last month
- AI analyzer for Hayabusa results.☆28Oct 25, 2026Updated last week
- Go package for fexecve(3) and execveat(2)☆16Mar 4, 2026Updated 7 months ago
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆18Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This crate provides functions for working with IPv4 CIDRs and IPv6 CIDRs.☆35Sep 14, 2026Updated last month
- A collection of sample code used in some experiments with Sliver C2☆17Mar 28, 2023Updated 3 years ago
- A fork of the evtx Rust crate for Hayabusa☆15Oct 8, 2026Updated 3 weeks ago
- A Rust library for parsing and evaluating Sigma rules☆24Nov 26, 2025Updated 11 months ago
- Semgrep Rules for Detecting Magecart Skimmers and Obfuscated JavaScript☆14Mar 5, 2025Updated last year
- A dataset with CloudTrail events from an attack simulation using Stratus.☆29Jul 12, 2023Updated 3 years ago
- Azazel System: Cyber Scapegoat Gateway doctrine and tool family for delaying action, deception, and edge defense.☆13Sep 28, 2026Updated last month
- Turn any machine into a suite of inference and tuning endpoints for open source LLMs.☆12Dec 1, 2024Updated last year
- CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports wheth…☆15Jun 4, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A migration tool from Kibela to Notion.☆11Mar 8, 2024Updated 2 years ago
- ☆25Feb 13, 2021Updated 5 years ago
- Phishing attack against synced passkeys☆14Aug 9, 2025Updated last year
- ADPhantom A powerful interactive shell for NetExec. Automates AD enumeration, credential attacks, and report generation for red team eng…☆15May 18, 2026Updated 5 months ago
- ☆84Sep 14, 2026Updated last month
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated last week
- 🔍Lookup and Analyze Packet Capture ('PCAP') Files☆15Mar 17, 2019Updated 7 years ago
- 👨💻 Personal workspace for 2025: Learning, coding experiments, and project ideas. 🚀 A collection of technical notes, software implemen…☆14Dec 28, 2025Updated 10 months ago
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated 2 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- GhidraMCP for headless☆68Updated this week
- SQL Serverの情報を取得するクエリ群☆14Jan 26, 2022Updated 4 years ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆167Oct 25, 2026Updated last week
- Nancy - Nim fancy ANSI tables☆57May 5, 2023Updated 3 years ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆122Oct 8, 2023Updated 3 years ago
- LLM benchmark results for THOR forensic finding triage quality☆28Oct 23, 2026Updated last week
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago