You can access the sigma rules to detect malicious activities. It is organized by Mitre Att&ck categories.
☆13Feb 7, 2022Updated 4 years ago
Alternatives and similar repositories for Sigma-Rule
Users that are interested in Sigma-Rule are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Resilient Automation Functions and Scripts☆15Jan 5, 2022Updated 4 years ago
- Examples for the CyCLI Powershell module☆12Mar 8, 2019Updated 7 years ago
- ☆11Jul 25, 2019Updated 7 years ago
- CyLR - Live Response Collection Tool☆10Jul 14, 2020Updated 6 years ago
- Code for NDSS' 19 paper: A Systematic Framework to Generate Invariants for Anomaly Detection in Industrial Control Systems☆13Jun 21, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆11Jun 16, 2022Updated 4 years ago
- A repo for security analytics & threat hunting resources☆21Sep 25, 2018Updated 7 years ago
- ☆20Oct 23, 2020Updated 5 years ago
- ☆11Jan 5, 2022Updated 4 years ago
- Sigma Detection Rule Repository☆93Jun 18, 2020Updated 6 years ago
- ☆14Apr 29, 2020Updated 6 years ago
- ☆17Jul 17, 2021Updated 5 years ago
- This Library provides python bindings to interact with the Cylance API.☆20Mar 20, 2023Updated 3 years ago
- Liberating dem proprietary APT implants☆20Dec 17, 2019Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 有国旗图案的国家区号选择器，包含 250 个国家地区，支持通过名称、拼音、代码、区号搜索。☆20May 29, 2019Updated 7 years ago
- Misc Threat Hunting Resources☆377Jan 26, 2023Updated 3 years ago
- ☆18Oct 20, 2022Updated 3 years ago
- ☆10Dec 24, 2022Updated 3 years ago
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- Using QRadar API☆20Feb 23, 2018Updated 8 years ago
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆93Dec 8, 2022Updated 3 years ago
- Win32 utility for auditing TCP connections☆56Aug 25, 2020Updated 5 years ago
- Repo of python/bash scripts for identifying IoC's in threat feed and other online tools☆28Jul 27, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Microsoft Office365 Protection Center Audit Log Parser☆27Jul 17, 2023Updated 3 years ago
- Meetuplardan arta kalanlar☆41Aug 18, 2025Updated 11 months ago
- parse strace log☆12Oct 16, 2019Updated 6 years ago
- Source code of Malware Classification by Learning Semantic and Structural Features of Control Flow Graphs (TrustCom 2021)☆22Mar 17, 2022Updated 4 years ago
- ☆17Jan 2, 2020Updated 6 years ago
- Repository of scripts/tools that may be useful in Security Operations Centres (SOC)☆57Nov 25, 2020Updated 5 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆65Dec 21, 2022Updated 3 years ago
- ☆29Jul 11, 2015Updated 11 years ago
- Prepare, Hunt, and Respond - Conceptual model against cyber attacks by JYVSECTEC☆62Jan 10, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Splunk App containing Sigma detection rules, which can be updated from a Git repository.☆111Feb 6, 2020Updated 6 years ago
- ☆14May 23, 2023Updated 3 years ago
- Scale out security for web deployments using VM-Series firewalls and Azure Application Gateway web load balancer☆32Jan 25, 2024Updated 2 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 2 months ago
- Windows Forensics Salt States☆22Updated this week
- ☆32May 14, 2018Updated 8 years ago
- My version of driller using Intel PIN and angrgdb. In "theory" can work with AFL in deferred and persistent mode.☆13Feb 10, 2019Updated 7 years ago