Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professionals and enthusiasts to improve the quality and reliability of detection rules.
☆56Aug 7, 2026Updated this week
Alternatives and similar repositories for rulezet-core
Users that are interested in rulezet-core are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange☆32Updated this week
- A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.☆38Updated this week
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Aug 14, 2025Updated 11 months ago
- An open source platform to support analysts to organise their case and tasks☆148Updated this week
- Built for the frontlines of cyber defense, our next-generation MISP empowers edge deployments and threat hunters with fast, lightweight, …☆30Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Pivotick is network graph library to facilitate pivoting.☆27Jul 30, 2026Updated last week
- BSimVis is a tool to analyze similarities across a collection of binaries, based on Ghidra analyzers and the BSim (Behavioral Similarity)…☆21Updated this week
- Draugnet is a lightweight, open-source tool for anonymous cyber threat reporting. Built for the MISP ecosystem, it lets users submit and …☆21Jul 8, 2026Updated last month
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 3 years ago
- misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push) based…☆22Jul 3, 2026Updated last month
- Website for ail-typo-squatting library☆74Feb 25, 2026Updated 5 months ago
- Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streaml…☆556Updated this week
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆21Mar 30, 2026Updated 4 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 4 months ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆14May 22, 2024Updated 2 years ago
- MISP to Microsoft Defender integration☆18Jul 9, 2026Updated last month
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36May 11, 2026Updated 2 months ago
- Drone and UAV Digital Forensic☆20Apr 27, 2026Updated 3 months ago
- AIL project training materials☆39Apr 21, 2026Updated 3 months ago
- VulnAgent is an experimental AI-assisted cybersecurity agent framework that orchestrates modular agents using LLMs and domain-specific to…☆21Mar 24, 2026Updated 4 months ago
- CocktailParty is a data broker system based on phoenix framework☆23Apr 23, 2025Updated last year
- Similarius is a Python library to compare web page and evaluate the level of similarity.☆24Mar 2, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Rust Training by Examples☆16Dec 17, 2025Updated 7 months ago
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆45Jun 28, 2025Updated last year
- Detection engineering template☆15Jul 24, 2025Updated last year
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆38Mar 24, 2025Updated last year
- CyCAT.org taxonomies☆15May 22, 2021Updated 5 years ago
- A web scraper to create MISP events and reports☆20Jun 6, 2026Updated 2 months ago
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆39Jul 20, 2026Updated 3 weeks ago
- A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.☆33Jul 2, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆60Jul 8, 2026Updated last month
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆59Mar 5, 2026Updated 5 months ago
- Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.☆84Jul 31, 2026Updated last week
- ☆11Apr 10, 2024Updated 2 years ago
- Backend for all data schema and automation running OpenTide instances☆37Jul 8, 2026Updated last month
- A CTI program management and production platform built around MISP☆32Updated this week