spyre-project / spyre

Related projects ⓘ

Alternatives and complementary repositories for spyre

• 0xrawsec / gene
  Signature engine for all your logs
  ☆161Updated last year
• target / halogen
  Automatically create YARA rules from malicious documents.
  ☆207Updated 2 years ago
• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆77Updated 2 years ago
• bfuzzy1 / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆90Updated last year
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆98Updated 2 months ago
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆144Updated 8 months ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆236Updated 3 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆104Updated 6 years ago
• StrangerealIntel / DailyIOC
  IOC from articles, tweets for archives
  ☆311Updated 11 months ago
• joesecurity / sigma-rules
  Sigma rules from Joe Security
  ☆203Updated 2 weeks ago
• 3CORESec / S2AN
  S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator
  ☆84Updated last year
• endgameinc / eqllib
  ☆158Updated 3 years ago
• botherder / kraken
  Cross-platform Yara scanner written in Go
  ☆330Updated last year
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆135Updated 4 years ago
• pan-unit42 / playbook_viewer
  ☆168Updated 4 months ago
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆160Updated 4 months ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆101Updated 2 years ago
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆364Updated 2 years ago
• microsoft / MSTIC-Sysmon
  Anything Sysmon related from the MSTIC R&D team
  ☆146Updated 5 months ago
• PUNCH-Cyber / YaraGuardian
  Django web interface for managing Yara rules
  ☆190Updated 6 years ago
• SecurityRiskAdvisors / TALR
  Threat Alert Logic Repository
  ☆89Updated 5 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆255Updated 5 years ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆60Updated 11 months ago
• MISP / misp-book
  User guide of MISP
  ☆259Updated last month
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆98Updated 3 months ago
• P4T12ICK / Sigma-Rule-Repository
  Sigma Detection Rule Repository
  ☆85Updated 4 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆285Updated 7 years ago
• silence-is-best / c2db
  c2 traffic
  ☆188Updated last year
• Neo23x0 / evt2sigma
  Log Entry to Sigma Rule Converter
  ☆105Updated 2 years ago