markuskont / go-sigma-rule-engineLinks
Golang library that implements a sigma log rule parser and match engine.
☆100Updated last year
Alternatives and similar repositories for go-sigma-rule-engine
Users that are interested in go-sigma-rule-engine are comparing it to the libraries listed below
Sorting:
- A Go implementation and parser for Sigma rules.☆92Updated 5 months ago
- simple YARA-based IOC scanner☆169Updated 2 weeks ago
- Signature engine for all your logs☆171Updated last year
- ☆166Updated 2 years ago
- Security ML models encoded as Yara rules☆213Updated 2 years ago
- Golang Parser for Microsoft Event Logs☆105Updated 3 months ago
- APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)☆55Updated 10 months ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Updated 4 years ago
- Sigma rules from Joe Security☆223Updated 11 months ago
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- ☆166Updated 4 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆86Updated last month
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆107Updated 5 months ago
- Cisco Orbital - Osquery queries by Talos☆135Updated last year
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆79Updated last week
- ☆223Updated last year
- Sigma Detection Rule Repository☆90Updated 5 years ago
- OSSEM Detection Model☆180Updated 3 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆156Updated 7 months ago
- Build a local copy of MITRE ATT&CK and CAPEC. Server mode for easy querying.☆34Updated last month
- stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats a…☆35Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆212Updated 3 years ago
- A CALDERA plugin☆79Updated last week
- gyp: A pure Go YARA parser☆106Updated last year
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆189Updated 4 years ago
- A MITRE Caldera plugin☆46Updated 2 weeks ago
- Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security relate…☆171Updated last year
- SOARCA - The Open Source CACAO-based Security Orchestrator!☆83Updated last month
- Automated YARA Rule Standardization and Quality Assurance Tool☆247Updated this week
- Go bindings for YARA☆379Updated 3 months ago