search

wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
671 stars 91 forks source link

Add timestamp try for rotten evtx files #46

Closed ZikyHD closed 1 year ago

ZikyHD commented 1 year ago

image In order to manage slightly damaged evtx files...