Karib0u

Karib0u/rustinel

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

414 stars 46 forks 414 watchers Rust Apache License 2.0
blue-team detection-engineering ebpf edr endpoint-detection endpoint-security etw incident-response linux linux-security malware-detection rust security-monitoring security-tools siem sigma sysmon threat-detection windows-security yara
View on GitHub Website
1 Open Issue Need Help Last updated: Jul 9, 2026

Open Issues Need Help

View All on GitHub
refactor(doctor): split doctor.rs into a module about 2 hours ago
good first issue refactor
Karib0u/rustinel
414

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

Rust
#blue-team#detection-engineering#ebpf#edr#endpoint-detection#endpoint-security#etw#incident-response#linux#linux-security#malware-detection#rust#security-monitoring#security-tools#siem#sigma#sysmon#threat-detection#windows-security#yara