Karib0u/rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A star delta has been computed for 63,087 of 63,709 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 10:02 and 00:54 (BKK).
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Rapidly Search and Hunt through Windows Forensic Artefacts
A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:
Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
The privacy-focused cryptocurrency
Tenzir is the data pipeline engine for security teams.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
That's all 9 repositories in this period.