1.Karib0u / rustinelEndpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.blue-teamdetection-engineeringedrendpoint-detectionetwincident-response+14 moreRustAPACHE-2.0526 total67 forks+28 starsfrom 498 · score 3.37
2.microsoft / avmlAVML - Acquire Volatile Memory for Linuxrustmemory-forensicslinux-securityRustMIT1.1K total96 forks+12 starsfrom 1,120 · score 2.56