41 changed files with 126659 additions and 126662 deletions
--- a/README.md
+++ b/README.md
@ -1,6 +1,3 @@
 # apt-hunter
-
- 在本地新建一个空文件夹，然后右键使用tortoisegit克隆到空文件夹中
-
 - When you upload the file path depth of 2 or more layers, please be sure to note that the file upload path '/' will be translated into the url '%2F' which will create a new folder! Be sure to pay attention!
 - 当你上传的文件路径深度在2层及以上时，请一定要注意文件上传路径'/' 会被url 翻译为 '%2F' 这样会新建一个文件夹！一定要注意！
--- a/doc/Apt-hunter_analyse泛读报告.docx
+++ b/doc/Apt-hunter_analyse泛读报告.docx
--- a/source/APT-Hunter.py
+++ b/source/APT-Hunter.py
--- a/source/APT-Hunter_old.py
+++ b/source/APT-Hunter_old.py
--- a/source/Custom-Sigma-Convertor.sh
+++ b/source/Custom-Sigma-Convertor.sh
--- a/source/Get_Latest_Sigma_Rules.sh
+++ b/source/Get_Latest_Sigma_Rules.sh
--- a/source/LICENSE
+++ b/source/LICENSE
--- a/source/O365_detection_rules.json
+++ b/source/O365_detection_rules.json
--- a/source/README.md
+++ b/source/README.md
--- a/source/lib/Banner.py
+++ b/source/lib/Banner.py
--- a/source/lib/CSVDetection.py
+++ b/source/lib/CSVDetection.py
--- a/source/lib/EvtxDetection.py
+++ b/source/lib/EvtxDetection.py
--- a/source/lib/EvtxHunt.py
+++ b/source/lib/EvtxHunt.py
--- a/source/lib/O365Hunter.py
+++ b/source/lib/O365Hunter.py
--- a/source/lib/SigmaHunter.py
+++ b/source/lib/SigmaHunter.py
--- a/source/lib/config/sigma-converter-rules-config.yml
+++ b/source/lib/config/sigma-converter-rules-config.yml
--- a/source/logo.png
+++ b/source/logo.png
--- a/source/requirements.txt
+++ b/source/requirements.txt
--- a/source/rules.json
+++ b/source/rules.json
--- a/source/samples/EventID_Frequency_Analysis.xls
+++ b/source/samples/EventID_Frequency_Analysis.xls
--- a/source/samples/Sample_Collected-SIDS.csv
+++ b/source/samples/Sample_Collected-SIDS.csv
--- a/source/samples/Sample_Logon_Events.csv
+++ b/source/samples/Sample_Logon_Events.csv
--- a/source/samples/Sample_Object_Access_Events.csv
+++ b/source/samples/Sample_Object_Access_Events.csv
--- a/source/samples/Sample_Process_Execution_Events.csv
+++ b/source/samples/Sample_Process_Execution_Events.csv
--- a/source/samples/Sample_Report.xlsx
+++ b/source/samples/Sample_Report.xlsx
--- a/source/samples/Sample_TimeSketch.csv
+++ b/source/samples/Sample_TimeSketch.csv
--- a/source/screenshot/APTHunter-Allreport.png
+++ b/source/screenshot/APTHunter-Allreport.png
--- a/source/screenshot/APTHunter-Excel.png
+++ b/source/screenshot/APTHunter-Excel.png
--- a/source/screenshot/APTHunter-Help.png
+++ b/source/screenshot/APTHunter-Help.png
--- a/source/screenshot/APTHunter-Timeline-Explorer.png
+++ b/source/screenshot/APTHunter-Timeline-Explorer.png
--- a/source/screenshot/APTHunter-output.png
+++ b/source/screenshot/APTHunter-output.png
--- a/source/windows-log-collector-full-v3-CSV.ps1
+++ b/source/windows-log-collector-full-v3-CSV.ps1
--- a/source/windows-log-collector-full-v3-EVTX.ps1
+++ b/source/windows-log-collector-full-v3-EVTX.ps1
--- a/src/lib/pycache/Banner.cpython-312.pyc
+++ b/src/lib/pycache/Banner.cpython-312.pyc
--- a/src/lib/pycache/Banner.cpython-39.pyc
+++ b/src/lib/pycache/Banner.cpython-39.pyc
--- a/src/lib/pycache/CSVDetection.cpython-312.pyc
+++ b/src/lib/pycache/CSVDetection.cpython-312.pyc
--- a/src/lib/pycache/EvtxDetection.cpython-312.pyc
+++ b/src/lib/pycache/EvtxDetection.cpython-312.pyc
--- a/src/lib/pycache/EvtxDetection.cpython-39.pyc
+++ b/src/lib/pycache/EvtxDetection.cpython-39.pyc
--- a/src/lib/pycache/EvtxHunt.cpython-312.pyc
+++ b/src/lib/pycache/EvtxHunt.cpython-312.pyc
--- a/src/lib/pycache/O365Hunter.cpython-312.pyc
+++ b/src/lib/pycache/O365Hunter.cpython-312.pyc
--- a/src/lib/pycache/SigmaHunter.cpython-312.pyc
+++ b/src/lib/pycache/SigmaHunter.cpython-312.pyc