diff --git a/README.md b/README.md index 8b2c138..bedadd7 100644 --- a/README.md +++ b/README.md @@ -1444,6 +1444,10 @@ This repository is created as an online bookmark for useful links, resources and Wazuh Open Source Host and Endpoint Security + + wagga40/Zircolite + A standalone SIGMA-based detection tool for EVTX. + williballenthin/EVTXtract EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.