A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the rules as needed to align with your organization’s environment and specific hunt objectives. These rules support threat detection, threat hunting, incident response, and related cybersecurity activities.
☆32Oct 28, 2026Updated 2 weeks ago
Alternatives and similar repositories for SIGMA_Rules
Users that are interested in SIGMA_Rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Self-hosted multi-engine Sigma detection for event logs☆46Nov 1, 2026Updated last week
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Updated this week
- A agentic Intel to hunt pipeline. Get hunting faster☆16Oct 19, 2026Updated 3 weeks ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆23Mar 30, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆12Aug 7, 2025Updated last year
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 4 years ago
- Config files for my GitHub profile.☆18Mar 21, 2026Updated 7 months ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 6 years ago
- Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security f…☆15Nov 5, 2026Updated last week
- Provides a multi-platform Graphical User Interface for hashlookup☆12Jul 12, 2024Updated 2 years ago
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Oct 9, 2026Updated last month
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- llama.cpp fork for GSQ-quantized Qwen3.8-Flash-Next on AMD Strix Halo (gfx1151): faster ROCm prefill, MTP and 4×256K chats with Q8_0 KV a…☆11Oct 11, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Teensy code to brute force a keylogger's unlock code☆15Sep 5, 2016Updated 10 years ago
- ☆21Sep 27, 2025Updated last year
- Community-driven PowerShell detection indicators☆47Jan 27, 2026Updated 9 months ago
- Python script that gets IOC from MISP and converts it into BRO intel files.☆13Apr 17, 2016Updated 10 years ago
- Open YARA scan- and search engine☆27Feb 23, 2025Updated last year
- ☆14May 14, 2018Updated 8 years ago
- This project implements a FastAPI-based local server designed to load one or more pre-trained NLP models during startup and expose them t…☆15Sep 26, 2026Updated last month
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 4 months ago
- Small utility that helps to create Bluesky account using did:web☆24Sep 19, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆24Jul 7, 2023Updated 3 years ago
- It's a repository related to SDR, amateur radio, satellites and similar topics. I know there are missing pieces and I plan to add all of …☆16Mar 14, 2026Updated 7 months ago
- This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due…☆19Jan 24, 2024Updated 2 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- Drone and UAV Digital Forensic☆21Apr 27, 2026Updated 6 months ago
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 3 weeks ago
- Generator of docker-compose file to allow secure configurations and multi-deployment strategy.☆12Nov 7, 2023Updated 3 years ago
- Extract Typelib Data from portable executables (recursively within a directory)☆12Oct 28, 2009Updated 17 years ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆30Sep 9, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- A complete Sigma detection engineering toolkit: parser, linter, formatter, evaluator, correlation engine, conversion framework, streaming…☆187Updated this week
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆29Updated this week
- pybond is a spying and stubbing library for python, inspired by the clojure bond library.☆13Mar 3, 2024Updated 2 years ago
- Parse HTB modules into fully offline HTML with images, code highlighting, and sidebar navigation. 📥📚☆17Nov 20, 2025Updated 11 months ago
- A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.☆35Updated this week
Are these results useful?