https://github.com/wagga40/Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
https://github.com/wagga40/Zircolite

auditd detection evtx evtxtract forensics forensics-tools pysigma python3 sigma sigma-rules sysmon

Last synced: about 1 month ago
JSON representation

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• Host: GitHub
• URL: https://github.com/wagga40/Zircolite
• Owner: wagga40
• Created: 2021-03-02T23:17:06.000Z (over 3 years ago)
• Default Branch: master
• Last Pushed: 2024-07-12T10:29:51.000Z (2 months ago)
• Last Synced: 2024-07-12T12:04:18.638Z (2 months ago)
• Topics: auditd, detection, evtx, evtxtract, forensics, forensics-tools, pysigma, python3, sigma, sigma-rules, sysmon
• Language: Python
• Homepage:
• Size: 57.9 MB
• Stars: 618
• Watchers: 24
• Forks: 84
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - wagga40/Zircolite - A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs (Python)