Dev / Scripting Toolchain

The languages and glue everything above is written in or automated with.

Python 3

system

pip, venv, and dev headers all included.

PowerShell 7

system

Cross-platform pwsh, pre-loaded with the Atomic Red Team profile.

Go

system

For building any of the Go-based tools from source.

Rust / Cargo

system

For the Rust-based tools (Chainsaw, Hayabusa, YARA-X all began here).

Docker + docker-compose + Podman

system

Every compose-based stack above runs on the hyphenated v1 docker-compose — the v2 plugin isn't in Debian's own repos.

Git + GitHub CLI

system

Version control, plus gh for working with GitHub directly.

Visual Studio Code

system

For editing Sigma rules, hooks, and everything else in this manifest.

jq / yq

system

Command-line JSON and YAML processors, for scripting Detection-as-Code pipelines.