Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

minor spelling error #38

Merged
merged 3 commits into from
Sep 30, 2022
Merged

minor spelling error #38

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
5a8b9f5
minor spelling error
AndrewRathbun Sep 30, 2022
7cbe2f3
minor spelling error
AndrewRathbun Sep 30, 2022
b9db1fe
minor spelling error
AndrewRathbun Sep 30, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/Advanced.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ If you forward your events to a central collector you can disable local logging

#### Forward events to a HTTP server

If you have multiple endpoints to scan, it is usefull to send the detected events to a central collector. As of v1.2, Zircolite can forward detected events to an HTTP server :
If you have multiple endpoints to scan, it is useful to send the detected events to a central collector. As of v1.2, Zircolite can forward detected events to an HTTP server :

```shell
python3 zircolite.py --evtx sample.evtx --ruleset rules/rules_windows_sysmon.json \
Expand Down
2 changes: 1 addition & 1 deletion zircolite.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1533,7 +1533,7 @@ def avoidFiles(pathList, avoidFilesList):
parser.add_argument("--debug", help="Activate debug logging", action="store_true")
parser.add_argument(
"--showall",
help="Show all events, usefull to check what rule takes takes time to execute",
help="Show all events, useful to check what rule takes takes time to execute",
action="store_true",
)
parser.add_argument(
Expand Down
2 changes: 1 addition & 1 deletion zircolite_dev.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -969,7 +969,7 @@ def avoidFiles(pathList, avoidFilesList):
parser.add_argument("--template", help="If a Jinja2 template is specified it will be used to generated output", type=str, action='append', nargs='+')
parser.add_argument("--templateOutput", help="If a Jinja2 template is specified it will be used to generate a crafted output", type=str, action='append', nargs='+')
parser.add_argument("--debug", help="Activate debug logging", action='store_true')
parser.add_argument("--showall", help="Show all events, usefull to check what rule takes takes time to execute", action='store_true')
parser.add_argument("--showall", help="Show all events, useful to check what rule takes takes time to execute", action='store_true')
parser.add_argument("--noexternal", help="Don't use evtx_dump external binaries (slower)", action='store_true')
parser.add_argument("--package", help="Create a ZircoGui package (not available in embedded mode)", action='store_true')
parser.add_argument("-U", "--update-rules", help="Update rulesets located in the 'rules' directory", action='store_true')
Expand Down