1.Karib0u / rustinelEndpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.blue-teamdetection-engineeringedrendpoint-detectionetwincident-response+14 moreRustAPACHE-2.0526 total67 forks+13 starsfrom 513 · score 2.64
2.microsoft / avmlAVML - Acquire Volatile Memory for Linuxrustmemory-forensicslinux-securityRustMIT1.1K total96 forks+3 starsfrom 1,129 · score 1.39