Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professionals and enthusiasts to improve the quality and reliability of detection rules.
☆58Oct 22, 2026Updated last week
Alternatives and similar repositories for rulezet-core
Users that are interested in rulezet-core are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange☆40Oct 21, 2026Updated last week
- Built for the frontlines of cyber defense, our next-generation MISP empowers edge deployments and threat hunters with fast, lightweight, …☆36Updated this week
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆40Jul 20, 2026Updated 3 months ago
- An open source platform to support analysts to organise their case and tasks☆172Updated this week
- A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.☆42Oct 22, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Draugnet is a lightweight, open-source tool for anonymous cyber threat reporting. Built for the MISP ecosystem, it lets users submit and …☆21Jul 8, 2026Updated 3 months ago
- Pivotick is network graph library to facilitate pivoting.☆32Oct 22, 2026Updated last week
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- BSimVis is a tool to analyze similarities across a collection of binaries, based on Ghidra analyzers and the BSim (Behavioral Similarity)…☆32Updated this week
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 4 years ago
- A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.☆43Oct 2, 2026Updated 3 weeks ago
- Website for ail-typo-squatting library☆76Feb 25, 2026Updated 8 months ago
- misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push/feed f…☆23Sep 1, 2026Updated last month
- A CTI program management and production platform built around MISP☆51Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Oct 9, 2026Updated 2 weeks ago
- Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streaml…☆598Updated this week
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- This repository contains hands-on Jupyter notebooks for learning threat intelligence analysis using CIRCL's open source tools and service…☆13Dec 12, 2025Updated 10 months ago
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆23Mar 30, 2026Updated 6 months ago
- A client to gather vulnerability-related information from the Fediverse.☆12Oct 22, 2026Updated last week
- CocktailParty is a data broker system based on phoenix framework☆23Apr 23, 2025Updated last year
- VulnAgent is an experimental AI-assisted cybersecurity agent framework that orchestrates modular agents using LLMs and domain-specific to…☆24Mar 24, 2026Updated 7 months ago
- Sysmon info corpus☆11Apr 10, 2025Updated last year
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Drone and UAV Digital Forensic☆21Apr 27, 2026Updated 6 months ago
- AIL project training materials☆40Oct 22, 2026Updated last week
- MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats☆63Oct 12, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆44Jun 28, 2025Updated last year
- Similarius is a Python library to compare web page and evaluate the level of similarity.☆24Mar 2, 2026Updated 7 months ago
- A Python client for the Global CVE Allocation System.☆21Aug 17, 2026Updated 2 months ago
- CyCAT.org taxonomies☆15May 22, 2021Updated 5 years ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- Factual rules are YARA rules to find legitimate software on raw disk acquisition.☆13Jan 18, 2022Updated 4 years ago
- A web scraper to create MISP events and reports☆21Oct 22, 2026Updated last week