wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
704Updated last month

Alternatives and similar repositories for Zircolite:

Users that are interested in Zircolite are comparing it to the libraries listed below