Update Readme, rules

Clean deprecated tools
wagga40 · Jun 1, 2024 · 0257ea7 · 0257ea7
1 parent 79187c9
commit 0257ea7
Show file tree

Hide file tree

Showing 18 changed files with 205,585 additions and 202,118 deletions.
diff --git a/README.md b/README.md
@@ -26,6 +26,8 @@ The use of [evtx_dump](https://github.com/omerbenamram/evtx) is **optional but r
 
 ## Quick start
 
+Check tutorials made by other (EN, SP and FR) [here](#tutorials).
+
 ### EVTX files : 
 
 Help is available with `zircolite.py -h`. If your EVTX files have the extension ".evtx" :
@@ -96,9 +98,11 @@ The Mini-GUI can be used totally offline, it allows the user to display and sear
 
 ### Tutorials
 
-- [Russ McRee](https://holisticinfosec.io) has published a pretty good [tutorial](https://holisticinfosec.io/post/2021-09-28-zircolite/) on SIGMA and **Zircolite** in his [blog](https://holisticinfosec.io/post/2021-09-28-zircolite/)
+- (EN) [Russ McRee](https://holisticinfosec.io) has published a pretty good [tutorial](https://holisticinfosec.io/post/2021-09-28-zircolite/) on SIGMA and **Zircolite** in his [blog](https://holisticinfosec.io/post/2021-09-28-zircolite/)
+
+- (SP) **César Marín** has published a tutorial in **spanish** [here](https://derechodelared.com/zircolite-ejecucion-de-reglas-sigma-en-ficheros-evtx/)
 
-- **César Marín** has published a tutorial in **spanish** [here](https://derechodelared.com/zircolite-ejecucion-de-reglas-sigma-en-ficheros-evtx/)
+- (FR) [IT-connect.fr](https://www.it-connect.fr/) has published [a very extensive tutorial](https://www.it-connect.fr/) in **French** on Zircolite
 
 ### References 
 

diff --git a/docs/Advanced.md b/docs/Advanced.md
diff --git a/docs/Zircolite_manual.pdf b/docs/Zircolite_manual.pdf
diff --git a/rules/rules_linux.json b/rules/rules_linux.json
diff --git a/rules/rules_windows_generic.json b/rules/rules_windows_generic.json
diff --git a/rules/rules_windows_generic_full.json b/rules/rules_windows_generic_full.json
diff --git a/rules/rules_windows_generic_high.json b/rules/rules_windows_generic_high.json
diff --git a/rules/rules_windows_generic_medium.json b/rules/rules_windows_generic_medium.json
diff --git a/rules/rules_windows_generic_pysigma.json b/rules/rules_windows_generic_pysigma.json
diff --git a/rules/rules_windows_sysmon.json b/rules/rules_windows_sysmon.json
diff --git a/rules/rules_windows_sysmon_full.json b/rules/rules_windows_sysmon_full.json