wagga40 / Zircolite
git clone https://github.com/wagga40/Zircolite.git
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
+2
stars, 24h · #11,712
+~7
stars, 7 days · #15,638
+~30
stars, 30 days · #19,295
868
★ total · +1% this week
121
forks · 0 open issues
Star history (as recorded here)
LanguagePython
License—
Created2021-03-02 (5y ago)
Last push3d ago
OwnerUser
GitHub topics
auditddetectiondfirdfir-automationdfir-toolsevtxevtxtractforensicsforensics-toolslogspysigmapython3sigmasigma-rulessysmon
Links
- GitHub: github.com/wagga40/Zircolite
- Homepage: https://wagga40.github.io/Zircolite/
- Releases · Issues · Hacker News mentions