README.md

detection-rules/analytics

Some sort of rule/analytic once a day maybe, far from perfect but its fun

yara

• https://yara.readthedocs.io/en/stable/writingrules.html
• https://github.com/Yara-Rules
• https://github.com/VirusTotal/yara
• https://github.com/InQuest/awesome-yara

suricata

• https://suricata.readthedocs.io/en/latest/index.html
• https://github.com/OISF/suricata
• https://rules.emergingthreats.net/

sigma

• https://github.com/SigmaHQ/sigma/wiki/Specification
• https://uncoder.io/

osquery

• https://osquery.io/schema/5.4.0/
• https://github.com/SophosRapidResponse/OSQuery

lolbas

• https://github.com/LOLBAS-Project/LOLBAS