Loki - Simple IOC and YARA Scanner
Repository Index
47,133 repositories indexed
1–4 of 4 · Most stars
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
A simple many-rules to many-files YARA scanner for incident response or malware zoos.