Velocidex/velociraptor-sigma-rules Velocidex/velociraptor-sigma-rules

  • Stars
    star
    7
  • Rank 2,294,772 (Top 46 %)
  • Language
    Go
  • Created almost 4 years ago
  • Updated 6 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
Velocidex/velociraptor-sigma-rules
github

Velocidex

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A Compiler from Sigma rules to VQL

More Repositories

1

velociraptor

Digging Deeper....
Go
2,874
star
2

WinPmem

The multi-platform memory acquisition tool.
C
671
star
3

c-aff4

An AFF4 C++ implementation.
C++
186
star
4

evtx

Golang Parser for Microsoft Event Logs
Go
96
star
5

Linpmem

Linpmem is a linux memory acquisition tool
C
68
star
6

go-ntfs

An NTFS file parser in Go
Go
64
star
7

go-pe

A Portable Executable parser for Golang
Go
47
star
8

velociraptor-docs

Documentation site for Velociraptor
HTML
35
star
9

oleparse

Golang parser for OLE files
Go
31
star
10

evtx-data

Publicly shareable windows event log message data
27
star
11

go-ese

Go implementation of an Extensible Storage Engine parser
Go
26
star
12

cloudvelo

An experimental Velociraptor implementation using cloud infrastructure
Go
21
star
13

go-prefetch

A golang implementation of a prefetch parser.
Go
19
star
14

vfilter

A library implementing a generic SQL like query language.
Go
19
star
15

pyvelociraptor

PyVelociraptor contains the python bindings for the Velociraptor API.
Python
16
star
16

regparser

A Golang Registry parser
Go
11
star
17

vtypes

VTypes is a data driven binary parsing system in Go.
Go
10
star
18

eql2vql

Transform EQL detection rules to VQL artifacts
Python
10
star
19

SQLiteHunter

Hunt for SQLite files used by various applications
Go
10
star
20

Tools

Distribute third party tools for use with Velociraptor
9
star
21

yara-tools

Tools to manipulate yara files.
Go
5
star
22

go-magic

Go bindings for libmagic
C
5
star
23

binparsergen

Binary Parser Generator for Go
Go
5
star
24

ordereddict

A simple Ordered Dict implementation.
Go
4
star
25

registry_hunter

Hunt the windows Registry automatically using VQL
Rebol
3
star
26

go-fat

Parser for FAT filesystems
Go
2
star
27

go-ewf

A Library for reading EWF files
Go
2
star
28

Audit

Collection of Audit and Compliance related VQL artifacts
Go
2
star
29

velociraptor-web

Velociraptor's documentation site.
CSS
2
star
30

zip

Enhanced zip library
Go
2
star
31

presentations

Presentations and Workshops
HTML
2
star
32

Training

Velociraptor - Digging Deeper Training site
Go
2
star
33

injector

A simple tool for testing memory based detection
Go
1
star
34

json

A fork of golang's encoding/json with options.
Go
1
star