wagga40/Zircolite

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Rapidly Search and Hunt through Windows Forensic Artefacts

Main Sigma Rule Repository

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Sysmon for Linux

Transform Linux Audit logs for SIEM usage

Investigate malicious Windows logon by visualizing and analyzing Windows event log