Repositories list

• uberAgent-config

  Public
  uberAgent configuration: UXM settings & ESA rules + checks

  detection-rulesendpoint-securityendpoint-monitoring

  detection-rulesendpoint-securityendpoint-monitoring

  PowerShell

  •

  Apache License 2.0

  •22 forks•33 stars•00 issues•00 pull requests•Updated Jul 29, 2026Jul 29, 2026

• pySigma-backend-uberAgent

  Public
  uberAgent backend for the Sigma rule converter.

  sigmasigma-rulesuberagent+ 1

  sigmasigma-rulesuberagentuaql

  Python

  •

  MIT License

  •11 fork•00 stars•00 issues•00 pull requests•Updated Jun 9, 2026Jun 9, 2026

• mitre_attack_csv

  Public
  MITRE ATT&CK in CSV form. Is used in the uberAgent ESA Splunk app.

  Python

  •2525 forks•00 stars•00 issues•00 pull requests•Updated May 28, 2026May 28, 2026

• uberAgent-ESA-Sysmon-Converter

  Public
  Converts Sysmon rules to uberAgent ESA Threat Detection rules

  sysmonsysmon-configuberagent+ 1

  sysmonsysmon-configuberagentuaql

  C#

  •

  Apache License 2.0

  •11 fork•44 stars•00 issues•00 pull requests•Updated May 22, 2026May 22, 2026

• uberAgent-Scripts

  Public
  Scripts to be used with uberAgent's custom script functionality

  PowerShell

  •

  Apache License 2.0

  •00 forks•22 stars•11 issue•00 pull requests•Updated Nov 24, 2025Nov 24, 2025

• uberAgentSupport

  Public
  A PowerShell module for creating an uberAgent support bundle

  PowerShell

  •

  Apache License 2.0

  •00 forks•22 stars•00 issues•00 pull requests•Updated Nov 24, 2025Nov 24, 2025

• uberAgentSupport-Scripts

  Public
  A collection of scripts useful for analysis and troubleshooting.

  PowerShell

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Nov 24, 2025Nov 24, 2025

• sigma

  Public
  Generic Signature Format for SIEM Systems

  Python

  •

  Other

  •2.7k2.7k forks•00 stars•00 issues•00 pull requests•Updated Aug 5, 2024Aug 5, 2024

• legacy-sigmatools

  Public archive
  Legacy Sigma Tools (sigmac etc.)

  Python

  •

  GNU Lesser General Public License v3.0

  •2.7k2.7k forks•00 stars•00 issues•00 pull requests•Updated Jun 23, 2023Jun 23, 2023

• esmat

  Public
  macOS Endpoint Security Message Analysis Tool

  macosendpointsecurity

  macosendpointsecurity

  C++

  •

  Apache License 2.0

  •44 forks•4747 stars•00 issues•00 pull requests•Updated Jan 31, 2022Jan 31, 2022

• LeakDetect

  Public
  A Windows memory instrumentation tool to track memory allocations and deallocations for long-running applications.

  C

  •

  MIT License

  •11 fork•1414 stars•00 issues•00 pull requests•Updated Jul 22, 2020Jul 22, 2020

• Grafana-Dashboards

  Public
  Collection of uberAgent Grafana Dashboards

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 14, 2020May 14, 2020

• vlDeploy

  Public
  Install applications locally or remotely from PowerShell

  deploymentpowershellinstallation-automation+ 2

  deploymentpowershellinstallation-automationinstall-appsuninstall-applications

  PowerShell

  •

  Apache License 2.0

  •11 fork•66 stars•00 issues•00 pull requests•Updated Mar 18, 2020Mar 18, 2020

• IntuneScripts

  Public
  PowerShell script compilation

  PowerShell

  •

  Apache License 2.0

  •00 forks•66 stars•00 issues•00 pull requests•Updated Jul 23, 2019Jul 23, 2019