An index of publicly available and open-source threat detection rulesets.
☆141Apr 17, 2025Updated last year
Alternatives and similar repositories for Rulehound
Users that are interested in Rulehound are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🛡️Proactive ransomware defense for Windows, providing secure file hiding through camouflage, encrypted mappings, smart shortcuts and sea…☆17Oct 14, 2025Updated last year
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- An OpenAI API Compatible Honeypot Gateway☆28Mar 17, 2025Updated last year
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Oct 24, 2026Updated last week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆229Updated this week
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆44Aug 5, 2026Updated 2 months ago
- MCP (Model Context Protocol) Server for pycti☆16Jul 11, 2025Updated last year
- 🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during …☆57Jul 5, 2026Updated 3 months ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆58Apr 22, 2025Updated last year
- A public collection of detections designed to detect threats associated with the Okta WIC Platform.☆40Oct 21, 2026Updated last week
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆25May 27, 2025Updated last year
- WPAUDIT: Advanced WordPress security auditing suite & vulnerability scanner. Automates pentesting with Nmap, WPScan, Nuclei, SQLMap. Comp…☆41May 27, 2025Updated last year
- Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation o…☆1,378Oct 12, 2026Updated 2 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- NOVA: The Prompt Pattern Matching☆173Sep 22, 2026Updated last month
- Assortment of scripts and tools for our Blackhat EU 2024 talk☆105Feb 6, 2025Updated last year
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆224Sep 4, 2024Updated 2 years ago
- Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.☆127Jul 20, 2026Updated 3 months ago
- Security tool against dependency typosquatting attacks☆56Updated this week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆65Sep 28, 2026Updated last month
- Inboxfuscation is an advanced offensive & defensive framework for mailbox rule obfuscation and detection in Exchange environments.☆84Sep 11, 2025Updated last year
- Nova Rules Collection - Official rules for Nova Framework prompt pattern matching☆20Sep 21, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆140Jun 7, 2025Updated last year
- Unprivileged endpoint deception for macOS and Linux workstations. Uses FIFO baits, other local traps, and protected sessions to detect se…☆26Jul 12, 2026Updated 3 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆504Jun 16, 2026Updated 4 months ago
- Rules shared by the community from 100 Days of YARA 2025☆39Jan 2, 2026Updated 9 months ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taki…☆342Oct 20, 2026Updated last week
- Velociraptor Server hosted in Azure App Service☆59Jun 4, 2025Updated last year
- AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. …☆113Jul 21, 2025Updated last year
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆44Jun 28, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- Fast and easy to use CLI-based file encryption program☆12Aug 24, 2026Updated 2 months ago
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆60Jul 13, 2025Updated last year
- This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)☆73Mar 17, 2025Updated last year
- ☆91Sep 25, 2026Updated last month
- A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System inc…☆107Aug 20, 2026Updated 2 months ago
- PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection…☆746Aug 22, 2026Updated 2 months ago