Pivograph on Hugo Projects CIRCL ← Pivograph

Projects linked to Rulezet

How Rulezet connects to the other projects of its ecosystem. Arrow = who calls or uses whom. Checked against the code of each project (September 2026).

Each project below is a page of this site. Its front matter describes it (graph) and says how it relates to the others (graph.relations); Hugo builds the graph from these pages.

Projects linked to Rulezet10 nodes and 12 relationships, described in the text below.federates with (Connector sync)fetches CVE & EPSS datapushes rules as MISP eventsimports taxonomies & galaxiesconverts MISP to STIXpushes detection artifactsdraws graphs withqueries rules by CVEimports YARA rulesattaches rules to caseshunts rules by CVElooks up & validates rulesRulezetRulezetMISPMISPVulnerability-LookupVulnerability-LookupCTI-TransmuteCTI-TransmuteVelociraptorVelociraptorAILAILFlowintelFlowintelMISP-WorkbenchMISP-WorkbenchzsazsazsazsaPivotickPivotick

This graph has 10 nodes (10 projects) connected by 12 relationships. The most connected nodes are Rulezet (12), MISP (2) and Vulnerability-Lookup (2).

Projects

Rulezet

Rulezet is a project. Community platform for sharing, reviewing and managing detection rules (YARA, Sigma, Suricata, Zeek, ...).

Website
rulezet.org
Source code
rulezet/rulezet-core — Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professionals and enthusiasts to improve the quality and reliability of detection rules. The repository has 55 stars, 9 forks and 14 open issues, is written mainly in Python, is licensed under AGPL-3.0 and was last updated on 21 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/rulezet

#cti #network-detection #network-security #threat-intelligence #yara

MISP

MISP is a project. Open source threat intelligence sharing platform.

Website
misp-project.org
Source code
MISP/MISP — MISP (core software) - Open Source Threat Intelligence and Sharing Platform. The repository has 6547 stars, 1637 forks and 2923 open issues, is written mainly in PHP, is licensed under AGPL-3.0 and was last updated on 23 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/misp

#cti #cybersecurity #fraud-detection #fraud-management #fraud-prevention #information-exchange #information-security #information-sharing #intelligence #malware-analysis #misp #security #stix #threat-analysis #threat-hunting #threat-intel #threat-intelligence #threat-intelligence-platform #threat-sharing #threatintel

Vulnerability-Lookup

Vulnerability-Lookup is a project. Fast vulnerability (CVE, GHSA, ...) lookup and correlation service.

Website
vulnerability.circl.lu
Source code
vulnerability-lookup/vulnerability-lookup — Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD). The repository has 576 stars, 92 forks and 70 open issues, is written mainly in Python, is licensed under AGPL-3.0 and was last updated on 23 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/vulnerability-lookup

#cvd #cvd-policy #cve #vulnerability-databases #vulnerability-lookup

CTI-Transmute

CTI-Transmute is a project. CTI format conversion service (MISP <-> STIX).

Website
cti-transmute.org
Source code
MISP/cti-transmute — An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange. The repository has 39 stars, 5 forks and 1 open issue, is written mainly in JavaScript, is licensed under AGPL-3.0 and was last updated on 8 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/cti-transmute

#cti #cyberthreatintelligence #misp #stix #stix2 #threat-intelligence #threat-intelligence-data

Velociraptor

Velociraptor is a project. Endpoint visibility, DFIR and hunting tool driven by VQL artifacts.

Website
docs.velociraptor.app
Source code
Velocidex/velociraptor — Digging Deeper.... The repository has 4268 stars, 657 forks and 75 open issues, is written mainly in Go and was last updated on 21 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/velociraptor

#digital-forensics #endpoint-discovery #endpoint-protection #endpoint-security #forensics-investigations #incident-response #inventory-management

AIL

AIL is a project. Analysis of Information Leaks framework: collects and analyses unstructured data, with YARA trackers and retro hunts.

Website
ail-project.org
Source code
ail-project/ail-framework — AIL framework - Analysis Information Leak framework. The repository has 1018 stars, 145 forks and 136 open issues, is written mainly in Python, is licensed under AGPL-3.0 and was last updated on 22 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/ail

#ail-framework #darkweb #darkweb-scraping #data-mining #information-extraction #information-security #leak

Flowintel

Flowintel is a project. Case management and analyst workflow platform.

Source code
flowintel/flowintel — An open source platform to support analysts to organise their case and tasks. The repository has 158 stars, 26 forks and 17 open issues, is written mainly in Python, is licensed under AGPL-3.0 and was last updated on 23 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/flowintel

#case-management #flowintel #incident-response #threatintel

MISP-Workbench

MISP-Workbench is a project. Analyst workbench around MISP data, with hunts over external sources.

Source code
MISP/misp-workbench — Built for the frontlines of cyber defense, our next-generation MISP empowers edge deployments and threat hunters with fast, lightweight, and actionable intelligence, anytime, anywhere. The repository has 31 stars, 6 forks and 8 open issues, is written mainly in Python, is licensed under AGPL-3.0 and was last updated on 23 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/misp-workbench

#misp #threat-hunting #threat-intelligence

zsazsa

zsazsa is a project. CTI program management and production platform built around MISP.

Source code
zsazsa-project/zsazsa — A CTI program management and production platform built around MISP. The repository has 40 stars, 8 forks and 9 open issues, is written mainly in Python, is licensed under AGPL-3.0 and was last updated on 23 September 2026.
Site page
ecrou-exact.github.io/project-graph/hugo-example/projects/zsazsa

#cti #misp

Projects linked to Rulezet: 10 nodes, 12 relationships. Data (JSON) · Open in Pivograph

Pages