bi-zone / etw

Related projects: ⓘ

• codeyourweb / irma
  enpoint detection / live analysis & sandbox host / signatures quality test
  ☆41Updated 3 years ago
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆96Updated last month
• bradleyjkemp / sigma-go
  A Go implementation and parser for Sigma rules.
  ☆82Updated 2 weeks ago
• 0xrawsec / gene
  Signature engine for all your logs
  ☆156Updated 10 months ago
• Velocidex / go-ese
  Go implementation of an Extensible Storage Engine parser
  ☆26Updated 7 months ago
• Velocidex / oleparse
  Golang parser for OLE files
  ☆31Updated 3 months ago
• 0xrawsec / golang-evtx
  ☆157Updated last year
• markuskont / go-sigma-rule-engine
  Golang library that implements a sigma log rule parser and match engine.
  ☆89Updated 2 months ago
• avast / yarang
  Alternative YARA scanning engine
  ☆66Updated 2 years ago
• Velocidex / go-prefetch
  A golang implementation of a prefetch parser.
  ☆19Updated last week
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆123Updated last year
• freetaxii / libstix2
  APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)
  ☆51Updated last year
• hdm / jarm-go
  A Go implementation of JARM
  ☆119Updated 2 years ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆93Updated 2 weeks ago
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆98Updated 6 months ago
• 0xrawsec / gene-rules
  ☆38Updated 2 years ago
• jsecurity101 / Windows-API-To-Sysmon-Events
  A repository that maps API calls to Sysmon Event ID's.
  ☆116Updated last year
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆93Updated 9 months ago
• Binject / debug
  Fork of pkg/debug that adds some additional functionality.
  ☆116Updated 6 months ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆86Updated last year
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆206Updated 5 years ago
• fox-it / cobaltstrike-beacon-data
  Open Dataset of Cobalt Strike Beacon metadata (2018-2022)
  ☆122Updated 2 years ago
• capnspacehook / taskmaster
  Windows Task Scheduler Library for Go
  ☆136Updated last week
• botherder / go-autoruns
  Collect autorun records from running system
  ☆59Updated 2 years ago
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆48Updated 2 years ago
• invoke-eric / jupyter
  Jupyter Notebooks for Cyber Threat Intelligence
  ☆35Updated last year
• vulsio / go-cti
  Build a local copy of MITRE ATT&CK and CAPEC. Server mode for easy querying.
  ☆29Updated this week
• jsecurity101 / TelemetrySource
  ☆214Updated 4 months ago
• Velocidex / go-ntfs
  An NTFS file parser in Go
  ☆64Updated last month
• elastic / labs-releases
  Elastic Security Labs releases
  ☆46Updated 3 weeks ago