wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

williballenthin / python-evtx

Pure Python parser for Windows Event Log files (.evtx)