1.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
+84 stars
from 442 · score 4.44
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
8 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
+70 stars
from 1,308 · score 4.26
3.splunk / security_content
Splunk Security Content
+61 stars
from 1,663 · score 4.13
4.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+60 stars
from 2,504 · score 4.11
5.sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
+48 stars
from 2,596 · score 3.89
6.julioliraup / Antiphishing
Advanced Phishing Protection: Suricata rulesets open and free
+30 stars
from 13 · score 3.43
7.matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
+20 stars
from 1,687 · score 3.04
8.anpa1200 / adversarygraph
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
+9 stars
from 26 · score 2.30