fibratus
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
defensive-toolsforensicsincident-response+3
2.5k1 day ago
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
bartblaze/yara-rulesCollection of private Yara rules.
target/halogenAutomatically create YARA rules from malicious documents.
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
hullabrian/eventhorizonTool that gathers a customizable set of ETW telemetry and generates user-defined detections
ethan-andrews/exploitarium-detectionsKQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of…
fireeye/cve-2021-44228OpenIOC rules to facilitate hunting for indicators of compromise
threatray/threat-researchIoCs and YARA rules from Threatray's Threat Research
nccgroup/yaml2yaraGenerate bulk YARA rules from YAML input
sumidcyber/zeroscout🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…
kjean13/aiagent-detection-rulesDetection rules for the Claude Code source leak : 16 Sigma rules, Splunk, Elastic, YARA. Lab-validated on GOAD Light DC02.