spyre-project / spyre

Related projects ⓘ

Alternatives and complementary repositories for spyre

• 0xrawsec / gene
  Signature engine for all your logs
  ☆160Updated 11 months ago
• target / halogen
  Automatically create YARA rules from malicious documents.
  ☆208Updated 2 years ago
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆77Updated 2 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆135Updated 4 years ago
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆144Updated 8 months ago
• bfuzzy1 / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆89Updated last year
• botherder / kraken
  Cross-platform Yara scanner written in Go
  ☆330Updated last year
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆285Updated 7 years ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆98Updated 2 months ago
• StrangerealIntel / DailyIOC
  IOC from articles, tweets for archives
  ☆310Updated 10 months ago
• joesecurity / sigma-rules
  Sigma rules from Joe Security
  ☆203Updated this week
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆104Updated 6 years ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆238Updated 3 years ago
• pan-unit42 / playbook_viewer
  ☆168Updated 4 months ago
• microsoft / MSTIC-Sysmon
  Anything Sysmon related from the MSTIC R&D team
  ☆146Updated 5 months ago
• 3CORESec / S2AN
  S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator
  ☆84Updated last year
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆363Updated 2 years ago
• endgameinc / eqllib
  ☆158Updated 3 years ago
• socprime / SigmaUI
  SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)
  ☆184Updated 3 years ago
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆122Updated 2 months ago
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆98Updated 3 months ago
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆160Updated 4 months ago
• lucky-luk3 / Grafiki
  Threat Hunting tool about Sysmon and graphs
  ☆329Updated last year
• silence-is-best / c2db
  c2 traffic
  ☆188Updated last year
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆258Updated last year
• hdm / jarm-go
  A Go implementation of JARM
  ☆119Updated 2 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆255Updated 5 years ago
• kirk-sayre-work / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆91Updated this week
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆153Updated 2 months ago
• mikesxrs / Open-Source-YARA-rules
  YARA Rules I come across on the internet
  ☆333Updated 6 months ago