Loading...
Zircolite is a standalone tool written in Python 3 that allows the use of SIGMA rules on various log formats including MS Windows EVTX, Auditd, Sysmon for Linux, EVTXtract, CSV, and XML. It is relatively fast, based on a Sigma backend (SQLite), and can export results to multiple formats like JSON, CSV, Splunk, Elastic, Zinc, and Timesketch. Zircolite can be used directly in Python or through provided binaries.
Common questions about Zircolite including features, pricing, alternatives, and user reviews.
Zircolite is Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for Linux, XML or JSONL/NDJSON Logs.. It is a Security Operations solution designed to help security teams with Log Management, Security Tools.
Binwalk is a firmware analysis tool that enables reverse engineering and extraction of embedded file systems and archives from firmware images.
Get strategic cybersecurity insights in your inbox
ZAT is a Python package that processes and analyzes Zeek network security data using machine learning libraries like Pandas, scikit-learn, Kafka, and Spark.
A tool that collects and displays user activity and system events on a Windows system.
A Yara ruleset designed to detect PHP shells and other webserver malware for malware analysis and threat detection.
An OCaml Ctypes wrapper for the YARA matching engine that enables malware identification capabilities in OCaml applications.