Golang library that implements a sigma log rule parser and match engine.
☆105Jul 17, 2024Updated 2 years ago
Alternatives and similar repositories for go-sigma-rule-engine
Users that are interested in go-sigma-rule-engine are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Go implementation and parser for Sigma rules.☆102May 15, 2025Updated last year
- Import specific data sources into the Sigma generic and open signature format.☆78May 6, 2022Updated 4 years ago
- Firepit - STIX Columnar Storage☆18Jun 5, 2024Updated 2 years ago
- Go implementation of the Community ID flow hashing standard☆22Jul 5, 2026Updated 3 months ago
- ☆59Dec 13, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆199Updated this week
- Simple streaming pre-processor and enrichment tool for structured logs.☆11Feb 25, 2023Updated 3 years ago
- Sigma Engine implementation in TypeScript☆28Mar 5, 2023Updated 3 years ago
- A test case runner for Sigma rules☆15Aug 14, 2024Updated 2 years ago
- SysFlow edge processing pipeline☆18Jan 15, 2025Updated last year
- This repository is a part of GSoC Project 2019 which intends to add the macOS support for Cuckoo Sandbox. This repository helps setting u…☆11Aug 26, 2019Updated 7 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 6 years ago
- Resources and Discussions About Detection Engineering☆12Sep 28, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆59Nov 2, 2025Updated 11 months ago
- CLI and Go package for fast, offline ASN lookups☆21Feb 27, 2025Updated last year
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- eBPF-based EDR for Linux☆18Aug 25, 2024Updated 2 years ago
- A source-available command-line tool for cybersecurity reporting☆71Updated this week
- A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data☆28Apr 27, 2025Updated last year
- stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats a…☆38Dec 15, 2022Updated 3 years ago
- ⚠️ ARCHIVED**: This repository is no longer actively maintained. All Sigma rules are now managed and available in SIEM Rules☆14Mar 19, 2026Updated 7 months ago
- Provide a shell like interface by utilizing osquery's distributed API☆82Jun 24, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- simple webapp for converting sigma rules into siem queries using the pySigma library☆50Sep 1, 2023Updated 3 years ago
- Klara docker compose☆11May 19, 2020Updated 6 years ago
- CIDR to IP List Tool☆13Mar 12, 2016Updated 10 years ago
- Collection of Modbus device converters 🐑☆11Jul 17, 2023Updated 3 years ago
- Sigma rules from Joe Security☆245Nov 4, 2024Updated last year
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Pritunl Access Control System☆11Jul 28, 2026Updated 3 months ago
- ☆70Oct 25, 2026Updated last week
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- server for indexing and querying passive DNS observations☆51Oct 21, 2026Updated last week
- Zeek package to generate a SMB client fingerprint☆27May 5, 2020Updated 6 years ago
- Transform Linux Audit logs for SIEM usage☆873Oct 19, 2026Updated last week
- ☆18Oct 6, 2026Updated 3 weeks ago
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆144Apr 20, 2023Updated 3 years ago
- This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)☆23Jul 8, 2016Updated 10 years ago
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆230Updated this week