wagga40/Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

↗ Open on GitHub

Stars

850

Forks

116

Language

Python

License

NOASSERTION

Last push

2 weeks ago

Python python3 detection forensics forensics-tools dfir logs evtx auditd dfir-automation sigma sysmon dfir-tools evtxtract pysigma sigma-rules

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.