Zircolite

https://github.com/wagga40/Zircolite

Free

Categories

Forensics

Description

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Keywords

auditd detection dfir dfir-automation dfir-tools evtx evtxtract forensics forensics-tools logs pysigma python3 sigma sigma-rules sysmon python

Example Usage

python3 zircolite.py -h

For authorized security testing and educational use only.