Venture: Cross-Platform GUI tool for parsing and analyzing Windows event logs
☆96Jan 23, 2025Updated last year
Alternatives and similar repositories for venture
Users that are interested in venture are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 10 months ago
- Automated security lab provisioning☆89May 11, 2026Updated 5 months ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆863Jun 29, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Read Windows message table entries.☆11Feb 5, 2023Updated 3 years ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆63Updated this week
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated 11 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week
- ☆213May 10, 2026Updated 5 months ago
- ☆75Oct 21, 2024Updated 2 years ago
- Parses USB connection artifacts from offline Registry hives☆109Feb 8, 2026Updated 8 months ago
- Web-based IOC management platform with threat intelligence enrichment for SOC teams☆22Jun 20, 2026Updated 4 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆229Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A repository to share publicly available Velociraptor detection content☆209Updated this week
- Windows Event Log Knowledge Base☆36Sep 27, 2026Updated last month
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated this week
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆24Oct 9, 2024Updated 2 years ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆681Oct 18, 2026Updated last week
- ☆12Aug 27, 2025Updated last year
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Updated this week
- A specialized environment for crafting, validating, and testing LimaCharlie detection rules☆15Oct 16, 2026Updated last week
- string encryption in Nim☆19Jun 15, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows Forensics Environment Builder☆191Sep 30, 2026Updated 3 weeks ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆166Updated this week
- Documentation and scripts to properly enable Windows event logs.☆724Oct 3, 2025Updated last year
- Convert PromptIntel & MoltThreats feeds into Nova Framework detection rules☆15Sep 16, 2026Updated last month
- A preconfigured Velociraptor triage collector☆79Oct 19, 2026Updated last week
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- ☆31Feb 28, 2025Updated last year
- ☆37Mar 2, 2026Updated 7 months ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆96Sep 7, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- The official repo for a project involving a crowdsourced DFIR book. The main purpose of this book is to give anyone interested an opportu…☆224Dec 30, 2025Updated 9 months ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…☆667Updated this week
- FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is de…☆828Apr 18, 2026Updated 6 months ago
- ☆18Oct 24, 2024Updated 2 years ago
- Jupyter Notebooks for the Blue Team☆39Jan 16, 2025Updated last year
- Powershell script that decrypts the data stored within a Thycotic Secret Server☆83Aug 3, 2020Updated 6 years ago
- Velociraptor Server hosted in Azure App Service☆59Jun 4, 2025Updated last year