bradleyjkemp / sigma-goLinks
A Go implementation and parser for Sigma rules.
☆88Updated last month
Alternatives and similar repositories for sigma-go
Users that are interested in sigma-go are comparing it to the libraries listed below
Sorting:
- Golang library that implements a sigma log rule parser and match engine.☆95Updated 11 months ago
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆53Updated 7 months ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Updated 4 years ago
- A Go implementation of JARM☆119Updated 3 years ago
- Golang Parser for Microsoft Event Logs☆104Updated last week
- gyp: A pure Go YARA parser☆107Updated last year
- Build a local copy of MITRE ATT&CK and CAPEC. Server mode for easy querying.☆33Updated last week
- An open-source command-line tool for cybersecurity reporting automation and a configuration language for reusable templates. Reporting-as…☆56Updated this week
- Cisco Orbital - Osquery queries by Talos☆134Updated 10 months ago
- simple YARA-based IOC scanner☆169Updated this week
- Go library for ETW (Event Tracing for Windows) events processing☆66Updated 2 years ago
- Golang-based SDK to CrowdStrike's APIs☆71Updated last week
- ☆44Updated 3 months ago
- ☆165Updated 2 years ago
- Signature engine for all your logs☆169Updated last year
- pocket guide for core detection engineering concepts☆29Updated 2 years ago
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data☆23Updated 2 months ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆73Updated 3 weeks ago
- Sigma rules from Joe Security☆217Updated 8 months ago
- SOARCA - The Open Source CACAO-based Security Orchestrator!☆76Updated 2 weeks ago
- The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…☆145Updated this week
- Sigma Detection Rule Repository☆88Updated 5 years ago
- A CALDERA plugin☆77Updated last month
- Security ML models encoded as Yara rules☆214Updated 2 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- pySigma Elasticsearch backend☆55Updated this week
- LOKI2 - Simple IOC and YARA Scanner☆95Updated last week
- A MITRE Caldera plugin☆43Updated 7 months ago
- A Golang API for TheHive☆13Updated 4 years ago