Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

kunai-project / kunai

Threat-hunting tool for Linux

cyb3rxp / awesome-soc

A curated knowledge base to build, run and mature a SOC (including CSIRT).

threathunters-io / laurel

Transform Linux Audit logs for SIEM usage