#Sigma
Showing 25 of 25 repositories tagged #sigma, ranked by stars
Rapidly Search and Hunt through Windows Forensic Artefacts
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
The privacy-focused cryptocurrency
Tenzir is the data pipeline engine for security teams.
Documentation and scripts to properly enable Windows event logs.
This project is a SIEM with SIRP and Threat Intel, all in one.
Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
Code to retrieve data for the programming languages influence visualizations from Freebase
Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.
Rocket powered machine learning. Create, compare, adapt, improve - artificial intelligence at the speed of thought.
A Go implementation and parser for Sigma rules.
A pySigma wrapper and langchain toolkit for automatic rule creation/translation
Yet Another Memory Analyzer for malware detection and Guarding Operations with YARA and SIGMA
A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:
Import specific data sources into the Sigma generic and open signature format.
Sysmon and wazuh integration with Sigma sysmon rules [updated]
A Python library for simulating and visualizing finite automata
A network graph exploration tool
Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules
Render igraphs from R using Sigma.js
Open source HIDS tailored for Microsoft Windows and Active Directory
Full static analysis of HyperHives macOS Rust infostealer — 571 decrypted config values, C2 infrastructure, DPRK/Contagious Interview attribution, YARA/Sigma rules, STIX 2.1 bundle, ATT&CK Navigator layer
Convert Sigma Rules to different formats
Mantissa Log is an open-source and cost-transparent engine that uses a natural language interface to "Ask Questions. Detect Threats. Trace Performance. Automate Responses."