Search Results - RepositoryStats

chainsaw WithSecureLabs

269

2.9k

gpl-3.0

52

Rapidly Search and Hunt through Windows Forensic Artefacts

dfir logs rust sigma attack windows blueteam chainsaw security detection forensics countercept threat-hunting

Created 2021-08-13

425 commits to master branch, last one 2 days ago

hayabusa Yamato-Security

207

2.4k

agpl-3.0

41

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Created 2020-09-18

4,464 commits to main branch, last one a day ago

WELA Yamato-Security

82

770

gpl-3.0

18

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

log dfir logs event sigma threat hunting windows analysis incident response timeline forensics

Created 2021-05-13

131 commits to main branch, last one about a year ago

firo firoorg

354

727

mit

99

The privacy-focused cryptocurrency

p2p zkp sigma zcoin privacy lelantus zerocoin blockchain merkle-tree cryptography asic-resistant cryptocurrency zero-knowledge zero-knowledge-proofs merkle-tree-proof-of-work

Created 2016-09-09

17,544 commits to master branch, last one 21 days ago

Zircolite wagga40

91

684

unknown

25

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

evtx sigma auditd sysmon pysigma python3 detection evtxtract forensics sigma-rules forensics-tools

Created 2021-03-02

230 commits to master branch, last one about a month ago

tenzir tenzir

89

651

bsd-3-clause

35

Tenzir is the data pipeline engine for security teams.

soc pcap siem zeek sigma dataops netflow security suricata pipelines secdataops hacktoberfest investigation threathunting incident-response

Created 2010-09-23

23,335 commits to main branch, last one 23 hours ago

EnableWindowsLogSettings Yamato-Security

51

573

gpl-3.0

15

Documentation and scripts to properly enable Windows event logs.

dfir logs event sigma sysmon windows auditing hayabusa security forensics monitoring

Created 2022-09-22

49 commits to main branch, last one about a year ago

bulletproofs sdiehl

45

536

bsd-3-clause

30

Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup

sigma zksnarks zk-snarks bulletproofs cryptography range-proofs zero-knowledge elliptic-curves pedersen-commitment

Created 2018-07-11

42 commits to master branch, last one about a year ago

S1EM V1D1AN

80

415

mit

18

This project is a SIEM with SIRP and Threat Intel, all in one.

n8n misp mwdb yara zeek sigma arkime cortex docker kibana malware opencti thehive filebeat logstash suricata zircolite velociraptor elasticsearch

Created 2021-05-11

638 commits to master branch, last one about a month ago

SIGMA-detection-rules mdecrevoisier

70

323

cc0-1.0

20

Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques

sigma windows powershell mitre-attack threat-hunting

Created 2020-11-27

305 commits to main branch, last one 7 days ago

programming-languages-influence yaph

59

187

unknown

34

Code to retrieve data for the programming languages influence visualizations from Freebase

graph sigma python network freebase influence visualization computer-science network-analysis data-visualization programming-languages

Created 2012-09-25

19 commits to master branch, last one 2 years ago

SigmaUI socprime

34

185

unknown

9

SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)

sigma kibana elastic elk-stack elasticsearch kibana-plugin

Created 2018-10-03

22 commits to master branch, last one 4 years ago

SIGMA-Resources nasbench

14

170

unknown

9

Resources To Learn And Understand SIGMA Rules

linux rules sigma awesome windows learning detection resources sigma-rules detection-engineering

Created 2021-10-10

13 commits to main branch, last one about a year ago

hayabusa-rules Yamato-Security

23

148

other

9

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

log dfir event mitre sigma attack windows analysis hayabusa

Created 2021-12-10

1,194 commits to main branch, last one a day ago

SIEGMA 3CORESec

21

144

agpl-3.0

10

SIEGMA - Transform Sigma rules into SIEM consumables

siem sigma security data-driven detection-engineering

Created 2020-09-28

232 commits to master branch, last one about a year ago

Uncoder_IO UncoderIO

25

136

other

12

An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.

edr xdr siem roota sigma uncoder datalake uncoderio translation threathunting

Created 2023-11-01

850 commits to main branch, last one 2 days ago

S2AN 3CORESec

13

85

agpl-3.0

5

S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator

sigma suricata sigma-rules mitre-attack suricata-rules threat-hunting threat-modeling

Created 2020-05-01

49 commits to master branch, last one 3 years ago

sigma-go bradleyjkemp

18

85

mit

5

A Go implementation and parser for Sigma rules.

sigma detection-engineering

Created 2020-09-10

70 commits to main branch, last one 3 months ago

JPEGView-Static annh9b

10

82

gpl-3.0

2

JPEGView-Static - fast and tiny viewer/editor for PC/Web Images (JPEG, BMP, PNG, WEBP, GIF, TIFF) and Camera Raw Formats (DNG, Canon, Nikon, Sony, Fuji, Sigma) in exactly one statically linked executa...