hayabusa

yamato-security/hayabusa-sample-evtx45

EVTX files

A collection of sample event log files used for testing and development of threat detection rules

yamato-security/enablewindowslogsettings571

Log setup script

Enables Windows event log settings to support a larger percentage of Sigma detection rules and retain logs for longer periods

withsecurelabs/chainsaw2.9K

Event log analyzer

A tool to rapidly search and analyze Windows forensic artefacts like Event Logs and MFT files.

yamato-security/wela769

Event log analyzer

Analyzes Windows Event Logs to identify security-related events and provides forensic tools for incident response.

threathunters-io/laurel722

Log converter

Converts Linux audit logs into standardized JSON format for enhanced security monitoring

xen0ph0n/yaragenerator332

Malware detector generator

Automates the creation of Yara rules to detect malware and other malicious objects of interest by analyzing sample files from various sources.

securitymagic/yara11

Malware detection rules

A collection of YARA rules for detecting malware and suspicious activity in various environments.

wagga40/zircolite684

Log analyzer

A standalone tool for analyzing and detecting security-related events in various Linux logs using SIGMA rules

chronicle/detection-rules326

Detection rules

A collection of YARA-L 2.0 sample rules and dashboards for threat detection in Google Security Operations

ahmedkhlief/apt-hunter1.3K

Event log analyzer

A tool to analyze Windows event logs for signs of APT attacks and malware activity.

neo23x0/yargen1.6K

YARA rule generator

Generates YARA rules from malware strings while excluding goodware strings and optionally refines the rules for AI use.

west-wind/threat-hunting-with-splunk58

Threat detection queries

Provides Splunk queries to detect vulnerability exploitation attempts and subsequent compromise, including threat hunting for MITRE ATT&CK TTPs

yara-silly-silly/yarasilly228

Malware rule generator

Automatically generates YARA rules from sample files for malware analysis

cluster25/detection13

Threat detection rules

A collection of threat detection rules written in YARA

h3x2b/yara-rules23

Malware detectors

Rules and patterns used to identify malicious software