Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for Linux, XML or JSONL/NDJSON Logs.
Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for Linux, XML or JSONL/NDJSON Logs.
Yes — Zircolite is listed as a free tool.
Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for Linux, XML or JSONL/NDJSON Logs.
Popular alternatives include Alien Vault Ossim, Alterix, Amazon Detective, Apache Metron.
AlienVault OSSIM provides an all-in-one security management solution with asset discovery, vulnerability assessment, and SIEM capabilities.
Converts Sigma and Yara rules to CRYPTTECH's SIEM query language.
A service that analyzes and visualizes security data to investigate potential security issues.
Apache Metron is a centralized tool for security monitoring and analysis that integrates various open-source big data technologies.
Track user activity and API usage on AWS and in hybrid and multicloud environments.
Search AWS CloudWatch logs on the command line with aws-sdk-for-go.
