1.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
+13 stars
from 513 · score 2.64
Ranked by Attention Score: stars gained over the last 7 complete days
4 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
AVML - Acquire Volatile Memory for Linux