A pySigma wrapper to manage detection rules.
☆45Feb 17, 2026Updated last week
Alternatives and similar repositories for droid
Users that are interested in droid are comparing it to the libraries listed below
Sorting:
- MWDB exercises☆20Jan 21, 2025Updated last year
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆12Sep 17, 2025Updated 5 months ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 3 years ago
- Storage for the IOCs I collect☆11Mar 26, 2025Updated 11 months ago
- The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…☆13Sep 21, 2025Updated 5 months ago
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Apr 22, 2024Updated last year
- An opensource sigma conversion tool built using pysigma☆160Feb 9, 2026Updated 2 weeks ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Jun 15, 2021Updated 4 years ago
- ☆44Nov 28, 2025Updated 3 months ago
- A collection of tips for using MISP.☆76Dec 11, 2024Updated last year
- API Hashing and String Decryption Reverse Engineering Workshop☆20Jul 26, 2023Updated 2 years ago
- ☆15Nov 25, 2021Updated 4 years ago
- Volatility 3 Plugins☆21Oct 3, 2022Updated 3 years ago
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆92Nov 3, 2025Updated 3 months ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆21Feb 11, 2026Updated 2 weeks ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆72Jan 6, 2026Updated last month
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆70Aug 20, 2025Updated 6 months ago
- Sample evtx files to use for testing hayabusa detection rules☆65Nov 5, 2025Updated 3 months ago
- A dynamic inventory script for Ansible that interacts with the Nutanix API☆27Feb 10, 2017Updated 9 years ago
- Passive DNS Common Output Format☆37Aug 30, 2024Updated last year
- Sigma Engine implementation in TypeScript☆28Mar 5, 2023Updated 2 years ago
- A repository to share publicly available Velociraptor detection content☆196Updated this week
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆269Mar 17, 2023Updated 2 years ago
- This repo hosts an MCP server for volatility3.x☆39Jul 9, 2025Updated 7 months ago
- Convert Sigma rules to Wazuh rules☆74Sep 13, 2025Updated 5 months ago
- Documentation and scripts to properly enable Windows event logs.☆672Oct 3, 2025Updated 4 months ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆413Nov 8, 2025Updated 3 months ago
- This repo contains a list of vendors that hide their security advisories, alerts, notices, vulnerabilities, and more behind either a payw…☆32May 11, 2024Updated last year
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆35Feb 2, 2022Updated 4 years ago
- Sigma rules from Joe Security☆232Nov 4, 2024Updated last year
- Hunting Queries for Defender ATP☆83Dec 14, 2025Updated 2 months ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆177Dec 2, 2025Updated 2 months ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆51Sep 22, 2025Updated 5 months ago
- Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…☆38Apr 5, 2024Updated last year
- This repository wraps the KustoSchemaTools into a CLI tool inside a container. This way it can be used as GitHub Action☆11Oct 21, 2025Updated 4 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆111Jan 24, 2026Updated last month
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆612Dec 8, 2025Updated 2 months ago
- Graphoscope is a solution to access multiple independent data sources from a common UI and show data relations as a graph☆41Sep 25, 2025Updated 5 months ago
- The Sigma command line interface based on pySigma☆177Feb 5, 2026Updated 3 weeks ago