1.Karib0u / rustinelEndpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.blue-teamdetection-engineeringedrendpoint-detectionetwincident-response+14 moreRustAPACHE-2.0526 total67 forks+384 starsfrom 142 · score 5.95
2.Yamato-Security / hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.dfirthreathuntingwindowseventlogs+14 moreRustAGPL-3.03.4K total303 forks+306 starsfrom 3,130 · score 5.73
3.WithSecureOpenSource / chainsawRapidly Search and Hunt through Windows Forensic Artefactsattackrustsecuritythreat-huntingblueteamchainsaw+7 moreRustGPL-3.03.7K total310 forks+185 starsfrom 3,520 · score 5.23
4.matanolabs / matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWSawscloudsecuritybig-dataserverlessapache-iceberg+14 moreRustAPACHE-2.01.7K total120 forks+40 starsfrom 1,667 · score 3.71