YARA-L Extension for VS Code
-
Updated
Mar 14, 2024 - JavaScript
#
yara-l
Here are 10 public repositories matching this topic...
Unified Detection-as-Code engine for Google SecOps and beyond.
google secops siem chronicle mitre-attack gitops threat-detection security-operations yara-l detection-as-code google-secops
-
Updated
Oct 9, 2026 - Python
Collection of YARA-L 2.0 sample rules for the Chronicle Detection API
cybersecurity siem blueteam detection-rules threat-detection security-operations detection-engineering yara-l google-secops chronicle-siem
-
Updated
Aug 18, 2026 - Python
One ClickFix attack, three rule formats, two SIEMs: Sigma, Elastic KQL/EQL, and Google SecOps YARA-L detections for T1204.004
-
Updated
Oct 5, 2026 - PowerShell
Convert Sigma detection rules to Splunk SPL, Microsoft KQL, Elastic EQL, QRadar AQL & Chronicle YARA-L | Multi-SIEM detection engineering tool
python splunk sentinel cybersecurity siem elastic spl sigma chronicle detection-rules blue-team eql mitre-attack qradar kql yara-l
-
Updated
Apr 8, 2026 - Python
“Detection engineering portfolio — KQL, Splunk, Sigma, Python enrichment scripts”
-
Updated
Aug 20, 2026 - Python
Agent Skills for Google SecOps — giving AI agents accurate knowledge for SIEM search and detection engineering.
cybersecurity siem udm ai-agents security-operations detection-engineering yara-l agent-skills google-secops chronicle-siem
-
Updated
Apr 16, 2026 - Python
Detection-as-code for three BFSI-targeting banking trojans (Banana RAT/SHADOW-WATER-063, TrickMo/Coper, TCLBANKER): Sigma + Microsoft Sentinel (KQL) + Google SecOps (YARA-L) rules, IOCs with GTI verdicts, and MITRE ATT&CK coverage.
ioc sigma soc chronicle threat-intelligence banking-trojan malware-detection blue-team mitre-attack threat-detection kql detection-engineering sigma-rules yara-l microsoft-sentinel google-secops
-
Updated
May 24, 2026 - Python
Provider-side detection content for LLM API abuse. Sigma + Google SecOps YARA-L, mapped to MITRE ATLAS, with synthetic test fixtures and CI.
-
Updated
Oct 9, 2026 - Python
Operate Google SecOps (Chronicle SIEM + Siemplify SOAR) as code — CLI + Go SDK
go cli golang devops sdk secops siem udm chronicle security-automation soar security-operations siemplify detection-engineering config-as-code yara-l detection-as-code google-secops chronicle-siem
-
Updated
Oct 12, 2026 - Go
Add this topic to your repo
To associate your repository with the yara-l topic, visit your repo's landing page and select "manage topics."