Skip to content

@CraftedSignal CraftedSignal

All

    Repositories list

    14 repositories

    • threat-feed

      Public
      Detection intelligence feed bundles for the CraftedSignal platform.
      Go
      •
      GNU Affero General Public License v3.0
      •0•1•3•10•Updated Aug 27, 2026Aug 27, 2026

    • website

      Public
      The repository that drives the main website at craftedsignal.io.
      HTML
      •
      GNU Affero General Public License v3.0
      •0•1•0•4•Updated Aug 26, 2026Aug 26, 2026

    • terraform

      Public
      Terraform modules to deploy CraftedSignal.
      terraformiaccraftedsignal
      terraformiaccraftedsignal
      HCL
      •
      GNU Affero General Public License v3.0
      •0•0•0•1•Updated Aug 26, 2026Aug 26, 2026

    • leql-parser

      Public
      Go parser for Rapid7 Logentries QL - extracts conditions, fields, and tables from LEQL queries
      goparserantlr
      goparserantlrsiemrapid7leql
      Go
      •
      GNU Affero General Public License v3.0
      •0•1•0•1•Updated Aug 26, 2026Aug 26, 2026

    • sigma-parser

      Public
      Go parser for Sigma detection rules (YAML) - extracts conditions, fields, and detection logic from Sigma rules
      goparsersigma
      goparsersigma
      Go
      •
      GNU Affero General Public License v3.0
      •0•1•0•0•Updated Aug 26, 2026Aug 26, 2026

    • soc.sucks

      Public
      HTML
      •
      GNU Affero General Public License v3.0
      •0•0•0•0•Updated Aug 26, 2026Aug 26, 2026

    • kql-parser

      Public
      Go parser for Kusto Query Language (KQL) - extracts conditions, fields, and tables from KQL queries
      goparserantlr
      goparserantlrsentinelsiemkustokql
      Go
      •
      GNU Affero General Public License v3.0
      •1•3•0•3•Updated Aug 26, 2026Aug 26, 2026

    • spl-parser

      Public
      Go parser for Splunk Processing Language (SPL) - extracts conditions, fields, and search terms from SPL queries
      goparsersplunk
      goparsersplunkantlrsiemspl
      Go
      •
      GNU Affero General Public License v3.0
      •0•1•0•1•Updated Aug 26, 2026Aug 26, 2026

    • fql-parser

      Public
      Dependency-free Go parser for CrowdStrike Falcon Query Language (FQL)
      Go
      •
      GNU Affero General Public License v3.0
      •0•0•0•0•Updated Aug 26, 2026Aug 26, 2026

    • cli

      Public
      CraftedSignal CLI for detections-as-code
      clicraftedsignal
      clicraftedsignal
      Go
      •
      GNU Affero General Public License v3.0
      •0•1•0•2•Updated Aug 26, 2026Aug 26, 2026

    • library

      Public
      A library of default SIEM queries to import into your CraftedSignal platform.
      GNU Affero General Public License v3.0
      •0•0•0•3•Updated Aug 26, 2026Aug 26, 2026

    • sdk-go

      Public
      The CraftedSignal SDK in the Go programming language.
      gosdkcraftedsignal
      gosdkcraftedsignal
      Go
      •
      GNU Affero General Public License v3.0
      •0•0•0•1•Updated Aug 26, 2026Aug 26, 2026

    • eql-parser

      Public
      Go parser for Elasticsearch EQL (Event Query Language) - extracts conditions & correlations, with bidirectional Sigma interop
      elasticsearchparserelastic
      elasticsearchparserelasticeqlcraftedsginal
      Go
      •
      GNU Affero General Public License v3.0
      •0•1•0•2•Updated Aug 26, 2026Aug 26, 2026

    • releases

      Public
      CraftedSignal platform releases, changelogs and container images
      GNU Affero General Public License v3.0
      •0•0•0•0•Updated Aug 26, 2026Aug 26, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.