Windows Security Logging
☆44Jul 17, 2022Updated 4 years ago
Alternatives and similar repositories for QLOG
Users that are interested in QLOG are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Transform Linux Audit logs for SIEM usage☆875Oct 19, 2026Updated last week
- A simple way of detecting multithreaded exfiltration in Zeek.☆15May 1, 2025Updated last year
- OSSEM Modular☆27Jun 29, 2020Updated 6 years ago
- The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and…☆10Oct 12, 2019Updated 7 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Linux Evidence Acquisition Framework☆121Sep 30, 2024Updated 2 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆41Aug 18, 2022Updated 4 years ago
- List CVEs and details that apply to your infrastructure (pre-inventoried).☆12Jan 25, 2021Updated 5 years ago
- New Framework Red Team Operations☆22Jun 7, 2021Updated 5 years ago
- A Python script that gathers all valid IP addresses from all text files from a directory, and checks them against Whois database, TOR rel…☆29Jun 27, 2022Updated 4 years ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- A module for CME that spiders across a domain.☆35Jul 15, 2022Updated 4 years ago
- ☆13Nov 22, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring☆118Oct 14, 2025Updated last year
- Typodetect☆75Jun 7, 2021Updated 5 years ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆19Jan 28, 2022Updated 4 years ago
- ☆20May 10, 2023Updated 3 years ago
- Registry permission scanner written in C# for finding potential privesc avenues within registry☆86Mar 9, 2021Updated 5 years ago
- ☆13Feb 14, 2020Updated 6 years ago
- A few quick recipes for those that do not have much time during the day☆22Oct 28, 2024Updated 2 years ago
- PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Pac…☆93Jun 3, 2021Updated 5 years ago
- Active Directory password spraying tool. Auto fetches user list and avoids potential lockouts.☆133Nov 25, 2021Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆13Jul 30, 2021Updated 5 years ago
- A collection of tools adversaries commonly use in an attack.☆15Nov 23, 2024Updated last year
- Python script for parsing ESET (NOD32) virlog.dat file.☆16Sep 28, 2017Updated 9 years ago
- Incremental Machine Leaning by example - Detecting suspicious activity in real time with Zeek data streams, River and JA3 hashes☆17Aug 10, 2022Updated 4 years ago
- A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQL…☆85Apr 7, 2026Updated 6 months ago
- ☆14Aug 16, 2021Updated 5 years ago
- An elevated STIX representation of the MITRE ATT&CK Groups knowledge base☆24May 23, 2022Updated 4 years ago
- ☆18Mar 26, 2024Updated 2 years ago
- High-level Threat Intelligence playbooks☆22Mar 6, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 6 years ago
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆43Sep 21, 2023Updated 3 years ago
- A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.☆11Aug 2, 2021Updated 5 years ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆18Jun 2, 2021Updated 5 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆75Jan 18, 2022Updated 4 years ago
- [Moved to Codeberg] Load generator for measuring overhead generated by EDRs and other logging tools on Linux☆13Feb 28, 2023Updated 3 years ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week