Rustinel

Open-source cross-platform endpoint detection engine using ETW, ESF, eBPF, Sigma, and YARA rules.

Desktopfreeglobal

Rustinel is an open-source, cross-platform endpoint detection engine for Windows, macOS, and Linux, using native telemetry sources (ETW, ESF, eBPF) and industry-standard detection rule formats (Sigma, YARA, IOCs) to generate ECS-formatted alerts, giving blue teams a self-hosted EDR foundation instead of relying on a commercial vendor.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Rustinel - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Rustinel to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Rustinel (or something else) actually fits.

Try a problem