jopohl / sigma-rustLinks
A Rust library for parsing and evaluating Sigma rules
☆19Updated last month
Alternatives and similar repositories for sigma-rust
Users that are interested in sigma-rust are comparing it to the libraries listed below
Sorting:
- pySigma Elasticsearch backend☆56Updated this week
- Augmentation to Machine Readable CTI☆37Updated 4 months ago
- YARA rule analyzer to improve rule quality and performance☆108Updated 9 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆114Updated this week
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆90Updated 2 months ago
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆211Updated 2 weeks ago
- LOKI RS - Simple IOC and YARA Scanner☆111Updated this week
- A guide on how to write fast and memory friendly YARA rules☆162Updated 11 months ago
- Sample evtx files to use for testing hayabusa detection rules☆64Updated 2 months ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆168Updated last month
- The backend server handling API requests and task management☆55Updated this week
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆85Updated 3 weeks ago
- An opensource sigma conversion tool built using pysigma☆155Updated 2 weeks ago
- JPCERT/CC public YARA rules repository☆110Updated last month
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆99Updated 2 weeks ago
- Security ML models encoded as Yara rules☆216Updated 2 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆21Updated 5 months ago
- Sigma rule specification☆164Updated 3 weeks ago
- Framework definitions that allow to build a custom SIEM.☆28Updated last year
- Automated YARA Rule Standardization and Quality Assurance Tool☆269Updated this week
- Alternative YARA scanning engine☆73Updated 3 years ago
- Golang library that implements a sigma log rule parser and match engine.☆103Updated last year
- Collection of rules created using YARA-Signator over Malpedia☆142Updated last year
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆52Updated this week
- pySigma Splunk backend☆42Updated last month
- A MITRE Caldera plugin☆49Updated 3 months ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆118Updated 2 years ago
- A Windows registry file parser written in Rust☆41Updated 2 months ago
- Jupyter Notebooks for Cyber Threat Intelligence☆35Updated 2 years ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆56Updated 3 weeks ago