A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers
☆172Oct 22, 2026Updated this week
Alternatives and similar repositories for rsigma
Users that are interested in rsigma are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account requi…☆513Updated this week
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆84Sep 30, 2026Updated 3 weeks ago
- A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the r…☆19Oct 13, 2026Updated last week
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated last week
- ☆14Jun 15, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆28Aug 24, 2026Updated last month
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆28Oct 16, 2026Updated last week
- Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.☆116Dec 3, 2025Updated 10 months ago
- Generate malware traces for detection tests☆19Oct 13, 2026Updated last week
- pySigma Elasticsearch backend☆78Oct 5, 2026Updated 2 weeks ago
- ☆59Dec 13, 2025Updated 10 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆228Oct 5, 2026Updated 2 weeks ago
- ☆12Aug 7, 2025Updated last year
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Lightweight open-core SIEM in Rust — ClickHouse for logs, Postgres for state.☆74Oct 16, 2026Updated last week
- [ARCHIVED] Public objects moved to OpenTideHQ/library☆17Sep 9, 2026Updated last month
- An opensource sigma conversion tool built using pysigma☆176Oct 13, 2026Updated last week
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆45Jun 28, 2025Updated last year
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- Community-driven PowerShell detection indicators☆46Jan 27, 2026Updated 8 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Updated this week
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆287Updated this week
- ☆47Nov 28, 2025Updated 10 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 5 months ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆65Sep 28, 2026Updated 3 weeks ago
- pySigma backend for generating Grafana Loki/LogQL rules☆58Updated this week
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆58Oct 15, 2026Updated last week
- syslog-ng metrics exporter☆16Oct 16, 2026Updated last week
- Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing vu…☆36Oct 10, 2026Updated last week
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆70Sep 29, 2026Updated 3 weeks ago
- pySigma OpenSearch backend☆15Oct 5, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A public repository of quality research on cyber attack techniques. This is the backend for the Technique Research Report (TRR) Library.☆33Sep 1, 2026Updated last month
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- ☆13Oct 14, 2026Updated last week
- MCP to help Defenders Detection Engineer Harder and Smarter☆498Jun 16, 2026Updated 4 months ago
- Throwaway root shells in AWS Lambda Firecracker microVMs. Launch a fresh VM in ~2s, run a command or attach an interactive shell, then le…☆34Aug 25, 2026Updated last month
- [ARCHIVED] Engine is now OpenTideHQ/opentide — DetectionOps as a package☆38Sep 9, 2026Updated last month
- A simple tool designed to create Atomic Red Team tests with ease.☆68May 3, 2026Updated 5 months ago