Velocidex / evtxLinks
Golang Parser for Microsoft Event Logs
☆104Updated last month
Alternatives and similar repositories for evtx
Users that are interested in evtx are comparing it to the libraries listed below
Sorting:
- Signature engine for all your logs☆171Updated last year
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆85Updated last month
- YARA rule analyzer to improve rule quality and performance☆102Updated 3 months ago
- ☆45Updated 2 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆106Updated 2 months ago
- simple YARA-based IOC scanner☆169Updated this week
- Publicly shareable windows event log message data☆27Updated 5 years ago
- enpoint detection / live analysis & sandbox host / signatures quality test☆44Updated 4 years ago
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆140Updated 2 years ago
- Blueteam operational triage registry hunting/forensic tool.☆148Updated 2 years ago
- Random hunting ordiented yara rules☆97Updated 2 years ago
- Active C2 IoCs☆99Updated 2 years ago
- Malware similarity platform with modularity in mind.☆78Updated 4 years ago
- Manipulate timestamps on NTFS☆52Updated 10 years ago
- JPCERT/CC public YARA rules repository☆110Updated 7 months ago
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆41Updated last year
- Initial triage of Windows Event logs☆102Updated last year
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆65Updated 2 years ago
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆167Updated 2 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆96Updated last week
- Open Dataset of Cobalt Strike Beacon metadata (2018-2022)☆125Updated 3 years ago
- A guide on how to write fast and memory friendly YARA rules☆147Updated 5 months ago
- Standardized Malware Analysis Tool☆53Updated 4 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 5 months ago
- A CALDERA plugin☆77Updated last week
- HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physic…☆84Updated last year
- Automatically create YARA rules from malicious documents.☆211Updated 3 years ago
- My conference presentations☆66Updated last year
- YaraScanner is a file pattern-matching tool based on YARA rules.☆57Updated 2 years ago