1.Karib0u / rustinelEndpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.blue-teamdetection-engineeringedrendpoint-detectionetwincident-response+14 moreRustAPACHE-2.0526 total67 forks+385 starsfrom 141 · score 5.96
2.microsoft / avmlAVML - Acquire Volatile Memory for Linuxrustmemory-forensicslinux-securityRustMIT1.1K total96 forks+57 starsfrom 1,075 · score 4.06