Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professionals and enthusiasts to improve the quality and reliability of detection rules.
☆55Jul 17, 2026Updated this week
Alternatives and similar repositories for rulezet-core
Users that are interested in rulezet-core are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange☆33Updated this week
- A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.☆35Updated this week
- An open source platform to support analysts to organise their case and tasks☆147Updated this week
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Aug 14, 2025Updated 11 months ago
- Built for the frontlines of cyber defense, our next-generation MISP empowers edge deployments and threat hunters with fast, lightweight, …☆30Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Pivotick is network graph library to facilitate pivoting.☆22Updated this week
- BSimVis is a tool to analyze similarities across a collection of binaries, based on Ghidra analyzers and the BSim (Behavioral Similarity)…☆19Updated this week
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 3 years ago
- misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push) based…☆22Jul 3, 2026Updated 2 weeks ago
- Website for ail-typo-squatting library☆74Feb 25, 2026Updated 4 months ago
- Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streaml…☆548Updated this week
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆21Mar 30, 2026Updated 3 months ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- MISP to Microsoft Defender integration☆18Jul 9, 2026Updated last week
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆14May 22, 2024Updated 2 years ago
- Drone and UAV Digital Forensic☆19Apr 27, 2026Updated 2 months ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36May 11, 2026Updated 2 months ago
- AIL project training materials☆39Apr 21, 2026Updated 2 months ago
- VulnAgent is an experimental AI-assisted cybersecurity agent framework that orchestrates modular agents using LLMs and domain-specific to…☆21Mar 24, 2026Updated 3 months ago
- CocktailParty is a data broker system based on phoenix framework☆23Apr 23, 2025Updated last year
- Rust Training by Examples☆15Dec 17, 2025Updated 7 months ago
- Similarius is a Python library to compare web page and evaluate the level of similarity.☆24Mar 2, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆46Jun 28, 2025Updated last year
- Detection engineering template☆15Jul 24, 2025Updated 11 months ago
- CyCAT.org taxonomies☆15May 22, 2021Updated 5 years ago
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆38Mar 24, 2025Updated last year
- A web scraper to create MISP events and reports☆20Jun 6, 2026Updated last month
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆39Jun 5, 2026Updated last month
- A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.☆33Jul 2, 2026Updated 2 weeks ago
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆57Mar 5, 2026Updated 4 months ago
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆60Jul 8, 2026Updated last week
- Backend for all data schema and automation running OpenTide instances☆35Jul 8, 2026Updated last week
- ☆11Apr 10, 2024Updated 2 years ago
- A CTI program management and production platform built around MISP☆32Jun 30, 2026Updated 2 weeks ago
- Helm chart for Open Cyber Threat Intelligence Platform☆36Updated this week
- Rust implementation of the DCSO Bloom filter☆29Jul 15, 2025Updated last year