markuskont / go-sigma-rule-engine
Golang library that implements a sigma log rule parser and match engine.
☆95Updated 9 months ago
Alternatives and similar repositories for go-sigma-rule-engine:
Users that are interested in go-sigma-rule-engine are comparing it to the libraries listed below
- A Go implementation and parser for Sigma rules.☆88Updated 8 months ago
- Signature engine for all your logs☆168Updated last year
- Security ML models encoded as Yara rules☆214Updated last year
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Updated 4 years ago
- simple YARA-based IOC scanner☆169Updated 2 months ago
- ☆164Updated 4 years ago
- Sigma rules from Joe Security☆210Updated 6 months ago
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- ☆165Updated 2 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆104Updated last month
- Golang Parser for Microsoft Event Logs☆102Updated 3 months ago
- gyp: A pure Go YARA parser☆107Updated last year
- YARA rule analyzer to improve rule quality and performance☆99Updated 3 weeks ago
- Sigma Detection Rule Repository☆87Updated 4 years ago
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆53Updated 5 months ago
- A guide on how to write fast and memory friendly YARA rules☆142Updated 2 months ago
- Go library for ETW (Event Tracing for Windows) events processing☆65Updated 2 years ago
- ☆219Updated last year
- c2 traffic☆188Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆211Updated 2 years ago
- Cisco Orbital - Osquery queries by Talos☆132Updated 8 months ago
- OSSEM Detection Model☆178Updated 2 years ago
- Anything Sysmon related from the MSTIC R&D team☆153Updated 11 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated last month
- JPCERT/CC public YARA rules repository☆106Updated 5 months ago
- A CALDERA plugin☆76Updated 2 weeks ago
- Alternative YARA scanning engine☆70Updated 2 years ago
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆214Updated 5 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆96Updated 3 weeks ago
- Parse YARA rules and operate over them more easily.☆187Updated 3 months ago