A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the rules as needed to align with your organization’s environment and specific hunt objectives. These rules support threat detection, threat hunting, incident response, and related cybersecurity activities.
☆19Oct 13, 2026Updated last week
Alternatives and similar repositories for SIGMA_Rules
Users that are interested in SIGMA_Rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated last week
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- ☆12Aug 7, 2025Updated last year
- This project implements a FastAPI-based local server designed to load one or more pre-trained NLP models during startup and expose them t…☆15Sep 26, 2026Updated 3 weeks ago
- Provides a multi-platform Graphical User Interface for hashlookup☆12Jul 12, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 4 years ago
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Oct 9, 2026Updated last week
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 6 years ago
- Config files for my GitHub profile.☆18Mar 21, 2026Updated 7 months ago
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Oct 15, 2026Updated last week
- DFIR forensics companion server + capture extension☆32Oct 14, 2026Updated last week
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆172Updated this week
- Rulith Inference, formerly Strix Llama. Serving a 125B MoE model fast on one AMD Strix Halo machine, on Windows: a patched llama.cpp, a m …☆40Updated this week
- AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human…☆35Sep 22, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆23Mar 30, 2026Updated 6 months ago
- This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due…☆19Jan 24, 2024Updated 2 years ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- This is a clone of an SVN repository at http://svn.code.sf.net/p/pyparsing/code. It had been cloned by http://svn2github.com/ , but the s…☆11Apr 23, 2017Updated 9 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆28Sep 9, 2026Updated last month
- A Group Policy (GPO) audit tool☆14Aug 7, 2024Updated 2 years ago
- Generator of docker-compose file to allow secure configurations and multi-deployment strategy.☆12Nov 7, 2023Updated 2 years ago
- Drone and UAV Digital Forensic☆21Apr 27, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 5 months ago
- 🪛 Rust powered precision file tools for AI agents thats minimize context use: patch-based edits, kernel-enforced path confinement. Dram…☆26Mar 7, 2026Updated 7 months ago
- Parse HTB modules into fully offline HTML with images, code highlighting, and sidebar navigation. 📥📚☆17Nov 20, 2025Updated 11 months ago
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating s…☆25Jun 26, 2022Updated 4 years ago
- I’m building a hands‑on Security Operations Center (SOC) home lab from scratch and documenting my progress as I learn defensive security …☆15Updated this week
- Wi-Fi Hacking Workshop☆14Dec 27, 2020Updated 5 years ago
- Python for Defenders Course Resources☆21Oct 8, 2026Updated 2 weeks ago
- Simple DLL injector in Rust☆26Aug 23, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated 2 years ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- ☆22Jul 13, 2026Updated 3 months ago
- warberry-ng is a modular suite of configuration scripts to prepare a Raspberry Pi running Kali Linux for red team operations and penetrat…☆12Jul 24, 2025Updated last year
- Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.☆11Apr 29, 2020Updated 6 years ago