Detection Engineering for Linux
Detection Engineering tools for Linux: the Detection Engineering options most relevant when Linux is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 6 cybersecurity tools
FEATURED
USE CASES
Searchable repository of Sigma detection rules for threat hunting and SIEM
OCyara performs OCR on images and PDF files to extract text content and scan it against Yara rules for malware detection.
Easy-to-use live forensics toolbox for Linux endpoints with various capabilities such as process inspection, memory analysis, and YARA scanning.
A collection of YARA rules for Windows, Linux, and Other threats.
Instructions for setting up SIREN, including downloading Linux dependencies, cloning the repository, setting up virtual environment, installing pip requirements, running SIREN, setting up Snort on Pi, and MySQL setup.
A comprehensive auditd configuration for Linux systems following best practices.
