jopohl / sigma-rustLinks
A Rust library for parsing and evaluating Sigma rules
☆17Updated this week
Alternatives and similar repositories for sigma-rust
Users that are interested in sigma-rust are comparing it to the libraries listed below
Sorting:
- Sample evtx files to use for testing hayabusa detection rules☆63Updated 3 weeks ago
- pySigma Elasticsearch backend☆54Updated last month
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆86Updated 3 weeks ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆166Updated last month
- An opensource sigma conversion tool built using pysigma☆148Updated last month
- Sigma rule specification☆157Updated last week
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆211Updated this week
- LOKI2 - Simple IOC and YARA Scanner☆106Updated 4 months ago
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆94Updated last month
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆51Updated 6 months ago
- Augmentation to Machine Readable CTI☆37Updated 2 months ago
- The core backend server handling API requests and task management☆49Updated last month
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆83Updated last month
- Convert Sigma rules to SIEM queries, directly in your browser.☆95Updated last month
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆109Updated 6 months ago
- A guide on how to write fast and memory friendly YARA rules☆157Updated 9 months ago
- A specification and style guide for YARA rules☆61Updated last year
- YARA rule analyzer to improve rule quality and performance☆107Updated 7 months ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆21Updated 4 months ago
- A dataset with CloudTrail events from an attack simulation using Stratus.☆23Updated 2 years ago
- An implementation of a Windows Event Collector server running on GNU/Linux.☆83Updated last month
- Takajō (鷹匠) is a Hayabusa results analyzer.☆148Updated 2 weeks ago
- JPCERT/CC public YARA rules repository☆110Updated 2 weeks ago
- A repository of my own Sigma detection rules.☆162Updated last year
- Automated YARA Rule Standardization and Quality Assurance Tool☆258Updated last week
- ☆42Updated this week
- A test case runner for Sigma rules☆14Updated last year
- A Go implementation and parser for Sigma rules.☆93Updated 6 months ago
- pySigma Splunk backend☆41Updated 3 months ago
- Golang library that implements a sigma log rule parser and match engine.☆102Updated last year