bannsec / winevtLinks
Windows Event Interactions in Python
☆68Updated last year
Alternatives and similar repositories for winevt
Users that are interested in winevt are comparing it to the libraries listed below
Sorting:
- ☆39Updated 5 years ago
- Bro integration with osquery☆15Updated 2 years ago
- An Inofficial Sysmon Version History (Change Log)☆33Updated 5 years ago
- Minimal, consistent Python API for building integrations with malware sandboxes.☆141Updated last year
- Parse evtx files and detect use of the DanderSpritz eventlogedit module☆150Updated 7 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Updated 7 years ago
- A CALDERA plugin for ATT&CK Evaluations Round 1☆33Updated 2 years ago
- Handy scripts to speed up malware analysis☆35Updated 2 years ago
- Bro PCAP Processing and Tagging API☆28Updated 8 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆51Updated 6 years ago
- PowerShell script for hunting webshells on Microsoft Exchange Servers.☆56Updated 8 years ago
- ExeFilter is an open-source tool and framework to filter file formats in e-mails, web pages or files. It detects many common file formats…☆70Updated 3 years ago
- Sysmon configuration☆65Updated 7 years ago
- Endpoint monitoring stack.☆19Updated 10 years ago
- Validates yara rules and tries to repair the broken ones.☆40Updated 5 years ago
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- Repository with all the Solarwinds Vulnerability information I've been tracking and using for communications, review, and technical under…☆25Updated 4 years ago
- Trace ScriptBlock execution for powershell v2☆40Updated 5 years ago
- Community modules for FAME☆65Updated 2 months ago
- Event Log Analysis Tools☆30Updated 9 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆57Updated 3 years ago
- Crack your macros like the math pros.☆33Updated 8 years ago
- Analysis Correlation Engine☆26Updated 6 years ago
- The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.☆95Updated 8 years ago
- Breaking the security of Microsoft's RMS☆55Updated 6 years ago
- The Alternative Fileless File System☆57Updated 6 years ago
- Checks with NSRL RDS servers looking for for hash matches☆114Updated 4 years ago
- This project is a lightweight wrapper for interacting with WMI using python/ctypes☆38Updated 6 years ago
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆113Updated last year
- Python library for parsing AccessData AD1 images☆33Updated 2 years ago