search

Velocidex / velociraptor-sigma-rules

A Compiler from Sigma rules to VQL
10 stars 4 forks source link

Created server artifact for post processing #17

Closed bmcder02 closed 9 months ago

bmcder02 commented 10 months ago

Created a config for a server artifact which collects flows from a specified ClientId, then runs the Sigma rules against those flows.