Sigma detection rules for AI agent security monitoring
☆15Jul 28, 2026Updated 3 months ago
Alternatives and similar repositories for sigma-ai
Users that are interested in sigma-ai are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆65Sep 28, 2026Updated last month
- An OpenAI API Compatible Honeypot Gateway☆27Mar 17, 2025Updated last year
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆23Oct 21, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- GenAI-STIX2.1-Generator is a tool that leverages Azure OpenAI capabilities to transform threat intelligence reports from unstructured web…☆24Mar 24, 2025Updated last year
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆60Updated this week
- RDP auditing script☆16Jul 22, 2025Updated last year
- ☆14Oct 21, 2026Updated last week
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Updated this week
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Updated this week
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆62Oct 28, 2022Updated 4 years ago
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆38Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- AWS Elastic Load Balancer Configuration Auditor☆12Apr 28, 2026Updated 6 months ago
- Local-LLM alert triage for self-hosted SOCs.☆12Sep 25, 2026Updated last month
- Rigorous Structured Analysis to equip Agents to Think like Intelligence Analysts☆66Jun 2, 2026Updated 4 months ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆28Jul 20, 2026Updated 3 months ago
- Comprehensive pfSense deployment, monitoring, and security knowledge base: From basic configuration to advanced SIEM infrastructure, IDS/…☆40Updated this week
- Threat Hunting queries of multiple platforms☆86Oct 22, 2026Updated last week
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- ☆17Oct 19, 2026Updated last week
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 11 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files☆32Jun 15, 2022Updated 4 years ago
- Audit and log all GitHub Copilot MCP tool calls in VSCode with ease.☆27Jul 4, 2026Updated 3 months ago
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- ☆17Aug 27, 2026Updated 2 months ago
- pySigma Splunk backend☆47Oct 11, 2026Updated 2 weeks ago
- A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representat…☆54Oct 22, 2026Updated last week
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 2 months ago
- Automatically exported from code.google.com/p/checkout4mac☆13Oct 24, 2016Updated 10 years ago
- Simple Chatbot for testing AI Red Team tooling☆16Feb 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- ☆79Oct 18, 2025Updated last year
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆18Updated this week
- Microsoft Vulnerable Driver Block Lists in CSV and JSON for SIEM lookups☆56Sep 15, 2026Updated last month
- Example of Fly.io machines orchestration with Terraform and DNSimple☆16Mar 5, 2023Updated 3 years ago