markuskont / go-sigma-rule-engine
Golang library that implements a sigma log rule parser and match engine.
☆92Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for go-sigma-rule-engine
- A Go implementation and parser for Sigma rules.☆84Updated 2 months ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- Signature engine for all your logs☆161Updated last year
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆98Updated 2 months ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆42Updated 3 years ago
- simple YARA-based IOC scanner☆164Updated this week
- Golang Parser for Microsoft Event Logs☆98Updated 3 months ago
- Sigma rules from Joe Security☆203Updated 2 weeks ago
- ☆158Updated 2 years ago
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆51Updated last year
- Go library for ETW (Event Tracing for Windows) events processing☆60Updated 2 years ago
- OSSEM Detection Model☆168Updated 2 years ago
- Sigma Detection Rule Repository☆85Updated 4 years ago
- ☆158Updated 3 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆141Updated last year
- Anything Sysmon related from the MSTIC R&D team☆146Updated 5 months ago
- Cisco Orbital - Osquery queries by Talos☆123Updated 3 months ago
- Security ML models encoded as Yara rules☆211Updated last year
- A Go implementation of JARM☆119Updated 2 years ago
- YARA rule analyzer to improve rule quality and performance☆93Updated last year
- A guide on how to write fast and memory friendly YARA rules☆126Updated last year
- Yara powered NIDS with high speed packet capture powered by PF_RING☆66Updated 6 months ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆104Updated this week
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆210Updated 5 years ago
- pySigma Elasticsearch backend☆43Updated this week
- A CALDERA plugin☆72Updated 3 weeks ago
- Automatically create YARA rules from malicious documents.☆207Updated 2 years ago
- JPCERT/CC public YARA rules repository☆103Updated 5 months ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆49Updated 3 weeks ago
- ☆219Updated last year