issues
search
wagga40
/
Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
671
stars
91
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Add docker "latest" tag.
#32
austinlg96
closed
2 years ago
4
Sigma Rule ID Included in Results
#31
teddy-ROxPin
closed
2 years ago
3
v2.7.0
#30
wagga40
closed
2 years ago
0
Issue with powershell logs
#29
cccs-jp
closed
2 years ago
1
error creating too many sqlite db columns
#28
Mal4ensics
closed
2 years ago
4
Windows misconfiguration
#27
blabla123sdfa
closed
2 years ago
4
Update genEmbed, add --version
#26
wagga40
closed
2 years ago
0
Fix typo in readme
#25
StevenD33
closed
2 years ago
0
Update sigmac option
#24
frack113
closed
2 years ago
0
Add level rule info in cli and log
#23
frack113
closed
2 years ago
0
Zircolite seems to hang on extracting evtx logs
#22
scudette
closed
2 years ago
6
Consider adding option to disable console output
#21
weslambert
closed
2 years ago
5
v2.6 : SYSMON Linux support + field list
#20
wagga40
closed
2 years ago
0
Field with space
#19
frack113
closed
2 years ago
5
Mitre resource_development
#18
frack113
closed
2 years ago
6
Add filename of sigma rule to Mini-Gui
#17
frack113
closed
2 years ago
3
fix charmap error
#16
frack113
closed
2 years ago
1
Windows 10 python 3.9.2 error byte 0x8d
#15
frack113
closed
2 years ago
0
Update Readme.md
#14
AndrewRathbun
closed
2 years ago
0
Update Usage.md with small spelling fixes
#13
mang0kitty
closed
3 years ago
0
Termination of EVTX processing when dealing with large EVTX files
#12
w0rm3r
closed
3 years ago
3
lint_python.yml
#11
austinsonger
closed
3 years ago
0
fix genRules.py encode bug
#10
rareguy
closed
3 years ago
3
Export CSV generates no valid CSV
#9
evild3ad
closed
2 years ago
12
Parsing EVTX folder with Windows 10 Binaries (embedded) is NOT working
#8
evild3ad
closed
3 years ago
8
KeyError: 'SystemTime' in zircolite.py -- suggested fix
#7
Hullgj
closed
3 years ago
2
'consoleLogger' is not defined
#6
MariasStory
closed
3 years ago
1
Docker image
#5
sk4la
closed
3 years ago
0
Bad interpreter
#3
sk4la
closed
3 years ago
1
Fix a bug when passing a WindowsPath to subprocess.call
#2
quack1
closed
3 years ago
1
Add more rules config file
#1
shino-337
closed
3 years ago
3
Previous