Alternatives and similar repositories for Get-AppLockerEventlog

Users that are interested in Get-AppLockerEventlog are comparing it to the libraries listed below

• CD-R0M / YARA

  View on GitHub
  Hundred Days of Yara Challenge
  ☆12Jun 21, 2022Updated 3 years ago
• NextronSystems / evtx-baseline

  View on GitHub
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆86Dec 17, 2025Updated last month
• 0xHasanM / regexplore

  View on GitHub
  Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite
  ☆18Mar 31, 2023Updated 2 years ago
• woanware / etw-event-dumper

  View on GitHub
  ☆33Feb 26, 2022Updated 3 years ago
• EricZimmerman / Sum

  View on GitHub
  ☆20Jan 10, 2025Updated last year
• MichalMotylinski / DiscFor-Discord-Artefact-Extraction-Tool

  View on GitHub
  Digital Artefact Extraction Tool for Discord Application
  ☆12Apr 13, 2023Updated 2 years ago
• AndrewRathbun / EventTranscript.db-Research

  View on GitHub
  A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.
  ☆43Jul 18, 2022Updated 3 years ago
• keydet89 / LNK

  View on GitHub
  Repository for LNK stuff
  ☆31Aug 31, 2022Updated 3 years ago
• EricZimmerman / ExtensionBlocks

  View on GitHub
  Extension blocks as found in ShellBags and other places in the Registry
  ☆25Jan 7, 2025Updated last year
• hackjalstead / IRCP

  View on GitHub
  A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments
  ☆65Jan 31, 2022Updated 4 years ago
• ydkhatri / spotlight_queries

  View on GitHub
  Queries for parsed spotlight database in sqlite
  ☆13Dec 29, 2020Updated 5 years ago
• omerbenamram / winstructs

  View on GitHub
  Parsers for common structures across windows formats.
  ☆12Aug 23, 2023Updated 2 years ago
• msuhanov / regf-samples

  View on GitHub
  Windows registry samples
  ☆24Nov 18, 2018Updated 7 years ago
• nasbench / C2-Matrix-Indicators

  View on GitHub
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆74Jan 26, 2022Updated 4 years ago
• WesSec / VelociDeploy-o-Matic

  View on GitHub
  Scripts to for ready-to-use Velociraptor instance deployment in Azure
  ☆14Jun 27, 2023Updated 2 years ago
• jstnk9 / ETW-Almulahaza

  View on GitHub
  ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system
  ☆13Jun 24, 2022Updated 3 years ago
• The-DFIR-Report / Suricata-Rules

  View on GitHub
  ☆11Jun 12, 2023Updated 2 years ago
• grahamhelton / dehashQuery

  View on GitHub
  A script used to query the dehashed API and filter for more useful results
  ☆17Jun 20, 2021Updated 4 years ago
• Velocidex / evtx-data

  View on GitHub
  Publicly shareable windows event log message data
  ☆28Nov 29, 2019Updated 6 years ago
• themeldingwars / Be.HexEditor

  View on GitHub
  A modified fork of Be.HexEditor for use in debug tools
  ☆14Jan 5, 2022Updated 4 years ago
• ydkhatri / macOS_FE

  View on GitHub
  Tools for macOS Forensic Bootable media
  ☆15May 20, 2020Updated 5 years ago
• NexusFuzzy / raccoon_config

  View on GitHub
  Scans a list of raccoon servers from Tria.ge and extracts the config
  ☆15Jun 5, 2023Updated 2 years ago
• dfirlabs / ntfs-specimens

  View on GitHub
  NTFS file system specimens
  ☆13Jul 3, 2023Updated 2 years ago
• montysecurity / InfraSpyder

  View on GitHub
  Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.
  ☆28Apr 22, 2023Updated 2 years ago
• forensicmatt / RustyReg

  View on GitHub
  Registry to JSON. This Project is for learning purposes and is not maintained.
  ☆12Dec 28, 2021Updated 4 years ago
• Helixo32 / SimpleEDR

  View on GitHub
  Simple EDR that injects a DLL into a process to place a hook on specific Windows API
  ☆96Aug 27, 2023Updated 2 years ago
• forensiclunch / ETLParser

  View on GitHub
  Binary commandline executable to parse ETL files
  ☆69Jun 7, 2018Updated 7 years ago
• cado-security / MalwareAnalysis

  View on GitHub
  MalwareAnalysis
  ☆12Dec 19, 2020Updated 5 years ago
• rj-chap / BaselineTraining

  View on GitHub
  Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk
  ☆13Mar 4, 2019Updated 6 years ago
• Octoberfest7 / Proxy_Egress_Persistence

  View on GitHub
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆34Sep 15, 2022Updated 3 years ago
• nasbench / EVTX-ETW-Resources

  View on GitHub
  Event Tracing For Windows (ETW) Resources
  ☆417Oct 30, 2025Updated 3 months ago
• ydkhatri / jarp

  View on GitHub
  Just Another broken Registry Parser (JARP)
  ☆16May 23, 2024Updated last year
• simon-weber / Instant-SQLite-Audit-Trail

  View on GitHub
  Set up a quick and dirty audit log on an SQLite db.
  ☆16May 16, 2013Updated 12 years ago
• bgrundy / cheatsheets-forensic

  View on GitHub
  Forensic cheatsheets for use with cheat
  ☆15Dec 2, 2021Updated 4 years ago
• williballenthin / wevt_template

  View on GitHub
  extract and parse WEVT_TEMPLATEs from PE files
  ☆18Dec 30, 2023Updated 2 years ago
• ArsenalRecon / SdbaParser

  View on GitHub
  Parser for Sdba memory pool tags
  ☆21Jul 16, 2021Updated 4 years ago
• SamuelArnold / SANS-SEC505

  View on GitHub
  Some of the lab files for the SANS Institute course SEC505: Securing Windows and PowerShell Automation: https://sans.org/sec505
  ☆17Jun 8, 2017Updated 8 years ago
• gmagklaras / POFR

  View on GitHub
  Penguin OS Forensic (or Flight) Recorder
  ☆40Dec 25, 2024Updated last year
• invoke-eric / jupyter

  View on GitHub
  Jupyter Notebooks for Cyber Threat Intelligence
  ☆35Sep 14, 2023Updated 2 years ago