Skip to content

Commit

Permalink
Merge pull request #38 from AndrewRathbun/master
Browse files Browse the repository at this point in the history
minor spelling error
  • Loading branch information
wagga40 committed Sep 30, 2022
2 parents 8e53882 + b9db1fe commit b883c80
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion docs/Advanced.md
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ If you forward your events to a central collector you can disable local logging

#### Forward events to a HTTP server

If you have multiple endpoints to scan, it is usefull to send the detected events to a central collector. As of v1.2, Zircolite can forward detected events to an HTTP server :
If you have multiple endpoints to scan, it is useful to send the detected events to a central collector. As of v1.2, Zircolite can forward detected events to an HTTP server :

```shell
python3 zircolite.py --evtx sample.evtx --ruleset rules/rules_windows_sysmon.json \
Expand Down
2 changes: 1 addition & 1 deletion zircolite.py
Original file line number Diff line number Diff line change
Expand Up @@ -1533,7 +1533,7 @@ def avoidFiles(pathList, avoidFilesList):
parser.add_argument("--debug", help="Activate debug logging", action="store_true")
parser.add_argument(
"--showall",
help="Show all events, usefull to check what rule takes takes time to execute",
help="Show all events, useful to check what rule takes takes time to execute",
action="store_true",
)
parser.add_argument(
Expand Down
2 changes: 1 addition & 1 deletion zircolite_dev.py
Original file line number Diff line number Diff line change
Expand Up @@ -969,7 +969,7 @@ def avoidFiles(pathList, avoidFilesList):
parser.add_argument("--template", help="If a Jinja2 template is specified it will be used to generated output", type=str, action='append', nargs='+')
parser.add_argument("--templateOutput", help="If a Jinja2 template is specified it will be used to generate a crafted output", type=str, action='append', nargs='+')
parser.add_argument("--debug", help="Activate debug logging", action='store_true')
parser.add_argument("--showall", help="Show all events, usefull to check what rule takes takes time to execute", action='store_true')
parser.add_argument("--showall", help="Show all events, useful to check what rule takes takes time to execute", action='store_true')
parser.add_argument("--noexternal", help="Don't use evtx_dump external binaries (slower)", action='store_true')
parser.add_argument("--package", help="Create a ZircoGui package (not available in embedded mode)", action='store_true')
parser.add_argument("-U", "--update-rules", help="Update rulesets located in the 'rules' directory", action='store_true')
Expand Down

0 comments on commit b883c80

Please sign in to comment.