Velocidex / evtx
Golang Parser for Microsoft Event Logs
☆96Updated last month
Related projects: ⓘ
- Signature engine for all your logs☆156Updated 10 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆93Updated 2 weeks ago
- 📇 Digital Forensics Artifact Repository (forensicanalysis edition)☆71Updated 7 months ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆41Updated 3 years ago
- YARA rule analyzer to improve rule quality and performance☆93Updated 9 months ago
- A Go implementation and parser for Sigma rules.☆82Updated 2 weeks ago
- Publicly shareable windows event log message data☆27Updated 4 years ago
- 🕵️ Process and show forensic artifacts (e.g. eventlogs, usb devices, network devices...) in forensicstores☆46Updated 10 months ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 2 years ago
- Go library for ETW (Event Tracing for Windows) events processing☆59Updated 2 years ago
- Malware similarity platform with modularity in mind.☆75Updated 3 years ago
- A guide on how to write fast and memory friendly YARA rules☆123Updated last year
- Digital Forensics Artifacts Knowledge Base☆71Updated 4 months ago
- A VBA parser and emulation engine to analyze malicious macros.☆90Updated this week
- Initial triage of Windows Event logs☆83Updated 3 months ago
- ☆157Updated last year
- A repository that maps API calls to Sysmon Event ID's.☆116Updated last year
- simple YARA-based IOC scanner☆162Updated 3 weeks ago
- A Go implementation of JARM☆119Updated 2 years ago
- Blueteam operational triage registry hunting/forensic tool.☆142Updated last year
- Linux Evidence Acquisition Framework☆114Updated 2 years ago
- Invoke-LiveResponse☆145Updated 2 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆74Updated 2 years ago
- Random hunting ordiented yara rules☆95Updated last year
- Extract BITS jobs from QMGR queue and store them as CSV records☆73Updated 2 months ago
- A CALDERA plugin☆72Updated 3 months ago
- Import specific data sources into the Sigma generic and open signature format.☆77Updated 2 years ago
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆162Updated last year
- ☆42Updated last year
- Sigma Detection Rule Repository☆84Updated 4 years ago