bradleyjkemp / sigma-go
A Go implementation and parser for Sigma rules.
☆84Updated 2 months ago
Related projects ⓘ
Alternatives and complementary repositories for sigma-go
- Golang library that implements a sigma log rule parser and match engine.☆92Updated 4 months ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆42Updated 3 years ago
- gyp: A pure Go YARA parser☆102Updated 8 months ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- Golang Parser for Microsoft Event Logs☆98Updated 3 months ago
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆51Updated last year
- A Go implementation of JARM☆119Updated 2 years ago
- Go library for ETW (Event Tracing for Windows) events processing☆60Updated 2 years ago
- simple YARA-based IOC scanner☆164Updated this week
- ☆158Updated 2 years ago
- ☆37Updated 2 months ago
- Cisco Orbital - Osquery queries by Talos☆123Updated 2 months ago
- Signature engine for all your logs☆161Updated last year
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆98Updated 2 months ago
- Graphoscope is a solution to access multiple independent data sources from a common UI and show data relations as a graph☆37Updated last week
- Build a local copy of MITRE ATT&CK and CAPEC. Server mode for easy querying.☆30Updated last month
- Sigma Detection Rule Repository☆85Updated 4 years ago
- Automatically create YARA rules from malicious documents.☆208Updated 2 years ago
- A CALDERA plugin☆72Updated 3 weeks ago
- A community event for security researchers to share their favorite notebooks☆106Updated 9 months ago
- pocket guide for core detection engineering concepts☆27Updated last year
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆46Updated last year
- Yara powered NIDS with high speed packet capture powered by PF_RING☆66Updated 6 months ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆50Updated 2 years ago
- The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…☆138Updated 2 months ago
- A MITRE Caldera plugin☆38Updated this week
- Sigma rules from Joe Security☆203Updated 2 weeks ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆89Updated last year
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆64Updated last week
- Automated YARA Rule Standardization and Quality Assurance Tool☆166Updated this week