1.Karib0u / rustinelEndpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.blue-teamdetection-engineeringedrendpoint-detectionetwincident-response+14 moreRustAPACHE-2.0526 total67 forks+84 starsfrom 442 · score 4.44
2.microsoft / avmlAVML - Acquire Volatile Memory for Linuxrustmemory-forensicslinux-securityRustMIT1.1K total96 forks+21 starsfrom 1,111 · score 3.09