Zircolite
sigma-essentials
Zircolite | sigma-essentials | |
---|---|---|
4 | 1 | |
602 | 0 | |
- | - | |
7.5 | 0.0 | |
6 days ago | over 2 years ago | |
Python | HTML | |
- | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Zircolite
-
Chainsaw for Linux
You can compare with Zircolite which uses Sigma on Auditd, Sysmon For Linux or any JSON formatted logs. It works also on EVTX but that's not the subject.
- Zircolite: A standalone SIGMA-based detection tool for EVTX
- Zircolite - A standalone SIGMA-based detection tool for EVTX
- Battle-tested, standalone and fast SIGMA-based detection tool for EVTX or JSON
sigma-essentials
-
The Ultimate Sigma Starter-Kit
Typical beta replys, yall shouldd be thankful! And consider contributing to the repo if you have some other SIGMA-Shit: https://github.com/prim4t/sigma-essentials
What are some alternatives?
Automata - Automatic detection engineering technical state compliance
sigma-male-grindset-api
rich - Rich is a Python library for rich text and beautiful formatting in the terminal.
hayabusa - Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
celery - Distributed Task Queue (development branch)
python-evtx - Pure Python parser for Windows Event Log files (.evtx)
automathon - A Python library for simulating and visualizing finite automata
labelImg - LabelImg is now part of the Label Studio community. The popular image annotation tool created by Tzutalin is no longer actively being developed, but you can check out Label Studio, the open source data labeling tool for images, text, hypertext, audio, video and time-series data.