Generic Signature Format for SIEM Systems

Golang parser for OLE files

psutil for golang

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

A Windows named pipe implementation written in pure Go.

Go library for ETW (Event Tracing for Windows) events processing

A ⚡ lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

Throttle the CPU usage to a maximum

Signature finder (from PE-bear)

The pattern matching swiss knife

A golang implementation of a prefetch parser.

Go client library for Personio, using employee credentials instead of API token

WMI for Go

MinIO Go client SDK for S3 compatible object storage

Fast JSON encoder/decoder compatible with encoding/json for Go

Connect to Windows Task Scheduler 2.0 with Golang

Yaegi is Another Elegant Go Interpreter

Go implementation of an Extensible Storage Engine parser

THOR Thunderstorm Collectors

A portable mmap package for Go

Console progress bar for Golang

Best Practice Auditd Configuration

Implements a subset of PKCS#7/Cryptographic Message Syntax (rfc2315, rfc5652)

Go bindings for YARA