Rustinel is an open-source endpoint detection agent for Windows, Linux and macOS. It runs Sigma, YARA and IOC rules over native telemetry and writes local alerts without requiring a cloud account.
529blue-team,detection-engineering,edrRustinel is an open-source endpoint detection agent for Windows, Linux and macOS. It runs Sigma, YARA and IOC rules over native telemetry and writes local alerts without requiring a cloud account.