Yamato-Security/RustyBlue Yamato-Security/RustyBlue

  • Stars
    star
    67
  • Rank 460,019 (Top 10 %)
  • Language
    Rust
  • License
    MIT License
  • Created almost 4 years ago
  • Updated almost 2 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
Yamato-Security/RustyBlue
github

Yamato-Security

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.

More Repositories

1

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Rust
2,169
star
2

WELA

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
PowerShell
744
star
3

EnableWindowsLogSettings

Documentation and scripts to properly enable Windows event logs.
Batchfile
502
star
4

hayabusa-rules

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
Python
129
star
5

takajo

Takajō (鷹匠) is a Hayabusa results analyzer.
Nim
76
star
6

hayabusa-sample-evtx

Sample evtx files to use for testing hayabusa detection rules
38
star
7

Presentations

13
star
8

hayabusa-evtx

A fork of the evtx Rust crate for Hayabusa
Rust
6
star
9

hayabusa-encoded-rules

Encrypted Hayabusa and Sigma rules to avoid anti-virus false positives
Rust
3
star
10

sigma-to-hayabusa-converter

Tool to convert Windows event log based Sigma rules to Hayabusa compatible rules.
Python
2
star
11

suzaku-rules

1
star