1.SigmaHQ / sigma
Main Sigma Rule Repository
+42 stars
from 11,343 · score 3.76
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
6 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
+13 stars
from 513 · score 2.64
3.olafhartong / sysmon-modular
A repository of sysmon configuration modules
+12 stars
from 3,171 · score 2.56
4.SwiftOnSecurity / sysmon-config
Sysmon configuration file template with default high-quality event tracing
+10 stars
from 5,708 · score 2.40
5.OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
+6 stars
from 4,700 · score 1.95
6.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
+1 stars
from 870 · score 0.69