{"repo":"CTRLRLTY/JARY","free":true,"listed":false,"github":"https://github.com/CTRLRLTY/JARY","clone":"git clone https://github.com/CTRLRLTY/JARY.git","description":"An opinionated extensible language for rule creation! (UNDER DEVELOPMENT)","language":"C","stars":13,"topics":["automation","cybersecurity","library","rule-based","siem","soar","jary"],"license":"BSD-3-Clause","category":"workflow-automation","readme_excerpt":"What is JARY? JARY is a runtime for creating .jary rules to search and correlate log data from external sources. It allows users to define structured rules that filter, match, and analyze log entries to support data analysis and automation. The JARY runtime is a lightweight library written in C that can be dynamically linked with other programs. It provides functions to compile JARY rules, feed data into the runtime, and execute the rules, all accessible from a single library through function calls. The .jary rule syntax is derived from the YARA language developed by VirusTotal. Things that JARY can do: - Automate logic within your main program using simple function calls - Create complex event correlation logic with an in-memory sqlite3 database - Integrate easily via dynamic linking - Hot-swappable module system for custom functionality - Callback listener for rule triggers - Correlation engine for a custom SIEM Why JARY is different It's a data correlation engine with a tiny footprint Jary is a compact library, less than 150 KB, yet it provides both data correlation and rule creation. As a library, it offers these advantages: - No need for multiple processes to host the correlation engine. - No network communication needed to send raw data to the engine. - Everything is done through a simple function call! It's designed with flexibility in mind Jary aims to be the the Lua of embedded correlation engines. To achieve this, it is designed to accommodate the key requirements f","default_branch":null,"files":null,"tree":[],"storefront":"/r/CTRLRLTY","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/CTRLRLTY/JARY/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}