A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers
☆94Jul 14, 2026Updated this week
Alternatives and similar repositories for rsigma
Users that are interested in rsigma are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSO…☆425Updated this week
- pySigma backend for generating Grafana Loki/LogQL rules☆53Updated this week
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.☆113Dec 3, 2025Updated 7 months ago
- pySigma Elasticsearch backend☆72Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆21Updated this week
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆37May 22, 2026Updated last month
- ☆57Dec 13, 2025Updated 7 months ago
- Automated Cloud Misconfiguration Testing☆26Jun 20, 2025Updated last year
- An opensource sigma conversion tool built using pysigma☆172Updated this week
- suspect is a simple bash triage tool☆19Aug 30, 2018Updated 7 years ago
- Lightweight open-core SIEM in Rust — ClickHouse for logs, Postgres for state.☆54Updated this week
- ☆113Dec 9, 2025Updated 7 months ago
- Mapping of open-source detection rules and atomic tests.☆214Feb 16, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- LLM benchmark results for THOR forensic finding triage quality☆25Updated this week
- Rigorously evaluating autonomous systems for cybersecurity at scale☆31Jul 9, 2025Updated last year
- Some stuff for PHD2021☆14May 21, 2025Updated last year
- Cobaltstrike UDRL with memory evasion☆15May 16, 2024Updated 2 years ago
- Super light, super fast, unlimited search idea☆27Aug 3, 2025Updated 11 months ago
- Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techn…☆52Jul 5, 2026Updated last week
- Registry timestamp manipulation☆17Feb 26, 2014Updated 12 years ago
- Deception implementation through analysis of BloodHound data☆61May 13, 2026Updated 2 months ago
- A Windows Event Log MCP☆49Aug 25, 2025Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Convert Sigma rules to SIEM queries, directly in your browser.☆120Jun 20, 2026Updated 3 weeks ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.☆33Jan 1, 2020Updated 6 years ago
- ☆46Nov 28, 2025Updated 7 months ago
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆46Jun 28, 2025Updated last year
- Yara rules☆21Mar 27, 2023Updated 3 years ago
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆576Updated this week
- Multilayered secret detection tool☆44Feb 11, 2026Updated 5 months ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Is this IP a C2 server?☆28Apr 21, 2020Updated 6 years ago
- A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.☆56Aug 8, 2025Updated 11 months ago
- Epimitheus is a tool that uses graphical database Neo4j for Windows Events visualization.☆19Mar 13, 2022Updated 4 years ago
- OSSEM Common Data Model☆56Sep 20, 2022Updated 3 years ago
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆99Jun 25, 2026Updated 2 weeks ago
- LLMON 🍋 - The World's First Web Adversarial AI Firewall☆39Jan 3, 2026Updated 6 months ago
- Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.☆54Jun 23, 2026Updated 3 weeks ago