73 Forks
473 Stars
473 Watchers

Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

How to download and setup Zircolite

Open terminal and run command
git clone https://github.com/wagga40/Zircolite.git
git clone is used to create a copy or clone of Zircolite repositories. You pass git clone a repository URL.
it supports a few different network protocols and corresponding URL formats.

Also you may download zip file with Zircolite https://github.com/wagga40/Zircolite/archive/master.zip

Or simply clone Zircolite with SSH
[email protected]:wagga40/Zircolite.git

If you have some problems with Zircolite

You may open issue on Zircolite support forum (system) here: https://github.com/wagga40/Zircolite/issues