
GCTI
Detection signature repository providing YARA rules and threat-hunting content for identifying malware and malicious activity across enterprise…

Curated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…

A repository to share publicly available Velociraptor detection content

Public repository of Sigma and YARA rules created by Synacktiv

This repository provides production-ready detection engineering content for **CVE-2025-25257**, a pre-authentication SQL Injection vulnerability in…

Signatures and IoCs from public Volexity blog posts.

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

eBPF-based runtime detector for container breakout vulnerabilities in runc and Docker, monitoring syscalls and Docker daemon calls to detect…