jopohl / sigma-rustLinks
A Rust library for parsing and evaluating Sigma rules
☆15Updated 5 months ago
Alternatives and similar repositories for sigma-rust
Users that are interested in sigma-rust are comparing it to the libraries listed below
Sorting:
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆85Updated 4 months ago
- An opensource sigma conversion tool built using pysigma☆141Updated this week
- Sample evtx files to use for testing hayabusa detection rules☆60Updated 11 months ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆163Updated last week
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆90Updated last week
- Takajō (鷹匠) is a Hayabusa results analyzer.☆143Updated last week
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆49Updated 5 months ago
- The core backend server handling API requests and task management☆48Updated this week
- LOKI2 - Simple IOC and YARA Scanner☆102Updated 3 months ago
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆51Updated 5 months ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆114Updated 2 years ago
- Sigma rule specification☆152Updated last month
- A repository to share publicly available Velociraptor detection content☆188Updated last week
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆81Updated last week
- ☆13Updated 11 months ago
- pySigma Elasticsearch backend☆54Updated last week
- Windows Event Log "Microsoft-Windows-Partition%4Diagnostic.evtx" parser and devices' VSNs extractor.☆19Updated last year
- SOARCA - The Open Source CACAO-based Security Orchestrator!☆83Updated last month
- Framework definitions that allow to build a custom SIEM.☆28Updated last year
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆205Updated last week
- A repository of my own Sigma detection rules.☆162Updated last year
- A preconfigured Velociraptor triage collector☆55Updated last week
- ☆17Updated this week
- ☆97Updated 2 months ago
- JPCERT/CC public YARA rules repository☆110Updated 10 months ago
- A pySigma wrapper to manage detection rules.☆41Updated 3 weeks ago
- A dataset with CloudTrail events from an attack simulation using Stratus.☆23Updated 2 years ago
- Intel Retrieval Augmented Generation (RAG) Utilities☆90Updated last year
- Dettectinator - The Python library to your DeTT&CT YAML files.☆117Updated 6 months ago
- Sigma rules to share with the community☆122Updated 8 months ago