eql

Interface with complex data via graph mapping.

A library for storing and querying graph data in Clojure

HoneyEQL is a Clojure library enables you to query database using the EDN Query Language.

A Clojure/Script library to transform your database into EQL graph resolvers using Pathom Connect

A CLI for executing EQL queries on EDN data

1st solution for the Webly-supervised Fine-grained Recognition competition in https://www.cvmart.net/race/10412/base

Declarative, composable and extensible tree querying and transformation based on EQL.

Better decision-making in large groups, by encouraging development of proposals by forking and merging.

Aliases in EQL

This site collects expert rules and behavioral rules (BIOC) based on Sigma/EQL TTPs.

适用于 Intellij IDEA 的 bingoohuang/eql 插件。

spring-boot+nginx+lua+redis+eql 微服务测试demo

Hands-on detection engineering portfolio focused on behavior-based threat detection, EQL, and real-world attack analysis

An experimental library agnostic EQL to GraphQL generator

Golang helper package for use with EQL

SPUC is a Rust CLI that parses STIX 2.1 patterns, normalizes them to IR, and emits detection content for EQL, KQL, Sigma, Snort, Suricata, and YARA.

Go parser for Elasticsearch EQL (Event Query Language) - extracts conditions & correlations, with bidirectional Sigma interop

Use cases de detection engineering sur ELK 8.19.16 avec règles KQL/EQL custom sur logs Sysmon, corrélation threat intel via MISP, couverture ATT&CK documentée avec limites et contournements.

Convert Sigma detection rules to Splunk SPL, Microsoft KQL, Elastic EQL, QRadar AQL & Chronicle YARA-L | Multi-SIEM detection engineering tool

XDR-style lab correlating SSH auth events with Elastic Defend endpoint telemetry via EQL, detecting brute-force login followed by recon commands