https://github.com/wagga40/Zircolite
Python598
27 days ago
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs