A Go implementation and parser for Sigma rules.
☆102May 15, 2025Updated last year
Alternatives and similar repositories for sigma-go
Users that are interested in sigma-go are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Golang library that implements a sigma log rule parser and match engine.☆105Jul 17, 2024Updated 2 years ago
- A test case runner for Sigma rules☆15Aug 14, 2024Updated 2 years ago
- gyp: A pure Go YARA parser☆108Mar 13, 2024Updated 2 years ago
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- 📚 A collection of tools and libraries to parse filesystems, archives and other data types☆22Oct 20, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Go implementation of an Extensible Storage Engine parser☆32Aug 12, 2026Updated 2 months ago
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆601Updated this week
- ☆59Dec 13, 2025Updated 10 months ago
- ⚠️ ARCHIVED**: This repository is no longer actively maintained. All Sigma rules are now managed and available in SIEM Rules☆14Mar 19, 2026Updated 6 months ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆448May 21, 2026Updated 4 months ago
- An NTFS file parser in Go☆76Oct 9, 2026Updated last week
- kaitaigo is a compiler and runtime to create Go parsers from Kaitai Struct files☆18Apr 20, 2022Updated 4 years ago
- JSON schemas for validating CACAO Security Playbooks. Note: In December 2023, Cyentific AS offered and transferred the content of this re…☆19Dec 15, 2023Updated 2 years ago
- DFF (Digital Forensics Framework)☆11Jan 6, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics☆196Apr 24, 2025Updated last year
- This package provides an S3 implementation for Go1.16 filesystem interface.☆14Aug 26, 2026Updated last month
- A Portable Executable parser for Golang☆46Nov 7, 2025Updated 11 months ago
- Storage for the IOCs I collect☆11Apr 3, 2026Updated 6 months ago
- Go bindings for YARA☆390Jul 1, 2025Updated last year
- Golang io/fs implementation for Google Cloud Storage☆13Jan 20, 2024Updated 2 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Package ghfs wraps the github v3 rest api with io/fs.☆10Aug 23, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Convert Sigma rules to SIEM queries, directly in your browser.☆123Aug 19, 2026Updated last month
- Sigma rules from Joe Security☆245Nov 4, 2024Updated last year
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- API for parsing binary files using a predefined grammar☆15Nov 17, 2016Updated 9 years ago
- A source-available command-line tool for cybersecurity reporting☆72Sep 8, 2026Updated last month
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆309May 7, 2025Updated last year
- pySigma Cookiecutter backend template☆25Sep 17, 2025Updated last year
- A linter for ksy files.☆12Aug 15, 2021Updated 5 years ago
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- YARA rule analyzer to improve rule quality and performance☆118Jun 4, 2026Updated 4 months ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 4 months ago
- A Python package and command line utility for scanning emails with YARA rules☆23Sep 21, 2026Updated 3 weeks ago
- Go package to perform common cryptanalysis functions.☆15Sep 23, 2017Updated 9 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆29Aug 6, 2022Updated 4 years ago
- ☆171Nov 11, 2022Updated 3 years ago