Add initial support for Evtxtract logs

wagga40 / Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

671 stars 91 forks source link

Closed wagga40 closed 1 year ago

wagga40 commented 1 year ago