bannsec / winevtLinks
Windows Event Interactions in Python
☆68Updated 10 months ago
Alternatives and similar repositories for winevt
Users that are interested in winevt are comparing it to the libraries listed below
Sorting:
- Minimal, consistent Python API for building integrations with malware sandboxes.☆139Updated last year
- ☆39Updated 5 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Updated 7 years ago
- Sysmon configuration☆65Updated 7 years ago
- Sandbox feature upgrade with the help of wrapped samples☆76Updated 7 years ago
- Crack your macros like the math pros.☆33Updated 8 years ago
- Generates visualizations from the output of flow tools such as SiLK.☆35Updated 8 years ago
- Breaking the security of Microsoft's RMS☆55Updated 6 years ago
- Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.☆82Updated 6 months ago
- Endpoint monitoring stack.☆19Updated 9 years ago
- Python abstract API for PassiveTotal services in the form of libraries and command line utilities.☆85Updated 2 years ago
- An Inofficial Sysmon Version History (Change Log)☆33Updated 4 years ago
- Validates yara rules and tries to repair the broken ones.☆40Updated 5 years ago
- ExeFilter is an open-source tool and framework to filter file formats in e-mails, web pages or files. It detects many common file formats…☆70Updated 3 years ago
- SQL scripts for querying event logs☆21Updated 8 years ago
- Bro integration with osquery☆15Updated 2 years ago
- Data related to the SANS Internet Storm Center☆11Updated last week
- ☆49Updated 9 years ago
- Pure Python parser for classic Windows Event Log files (.evt)☆51Updated 2 years ago
- Simple High Interaction Honeypot Solution for SMB protocol☆49Updated 4 years ago
- Parse evtx files and detect use of the DanderSpritz eventlogedit module☆148Updated 7 years ago
- DocBleachShell is the integration of the great DocBleach, https://github.com/docbleach/DocBleach Content Disarm and Reconstruction tool i…☆21Updated 3 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆34Updated 6 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 5 years ago
- the fastest way to consume threat intelligence.☆31Updated 2 years ago
- Bro PCAP Processing and Tagging API☆28Updated 7 years ago
- Security Onion Elastic Stack☆46Updated 4 years ago
- Basic demo for Hidden Treasure talk.☆49Updated 7 years ago
- Fast incident overview☆40Updated 8 years ago
- Checks with NSRL RDS servers looking for for hash matches☆114Updated 4 years ago