Alternatives and similar repositories for spyre:

Users that are interested in spyre are comparing it to the libraries listed below

• 0xThiebaut / sigmai
  Import specific data sources into the Sigma generic and open signature format.
  ☆78Updated 3 years ago
• 0xrawsec / gene
  Signature engine for all your logs
  ☆168Updated last year
• target / halogen
  Automatically create YARA rules from malicious documents.
  ☆211Updated 2 years ago
• 3CORESec / S2AN
  S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator
  ☆85Updated 2 years ago
• StrangerealIntel / DailyIOC
  IOC from articles, tweets for archives
  ☆313Updated last year
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆238Updated 3 years ago
• pan-unit42 / playbook_viewer
  ☆173Updated 10 months ago
• botherder / kraken
  Cross-platform Yara scanner written in Go
  ☆329Updated 2 years ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆104Updated last month
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆153Updated last month
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆137Updated 4 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• endgameinc / eqllib
  ☆164Updated 4 years ago
• kirk-sayre-work / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆96Updated 2 weeks ago
• joesecurity / sigma-rules
  Sigma rules from Joe Security
  ☆209Updated 6 months ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆61Updated last year
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆166Updated 10 months ago
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆375Updated 2 years ago
• intezer / yara-rules
  ☆125Updated 3 months ago
• la3ar0v / TuxResponse
  Linux Incident Response
  ☆90Updated 5 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago
• socprime / SigmaUI
  SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)
  ☆187Updated 4 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆261Updated 6 years ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆101Updated 3 years ago
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆102Updated 3 months ago
• olafhartong / detection-sources
  ☆53Updated 6 years ago
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆70Updated 3 weeks ago
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆261Updated 2 years ago
• silence-is-best / c2db
  c2 traffic
  ☆188Updated 2 years ago
• lucky-luk3 / Grafiki
  Threat Hunting tool about Sysmon and graphs
  ☆332Updated last year