yarox24 / EvtxHussarLinks
Initial triage of Windows Event logs
☆99Updated last year
Alternatives and similar repositories for EvtxHussar
Users that are interested in EvtxHussar are comparing it to the libraries listed below
Sorting:
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆79Updated last month
- ☆87Updated last year
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆54Updated last year
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆31Updated 3 years ago
- Sigma rules to share with the community☆122Updated 4 months ago
- Active C&C Detector☆154Updated last year
- ☆68Updated 3 months ago
- ShellSweeping the evil.☆52Updated last year
- Blueteam operational triage registry hunting/forensic tool.☆148Updated 2 years ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆85Updated 4 months ago
- Full of public notes and Utilities☆117Updated 4 months ago
- RegRipper4.0☆52Updated last month
- A PowerShell incident response script for quick triage☆80Updated 2 years ago
- CarbonBlack EDR detection rules and response actions☆71Updated 9 months ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆114Updated last year
- A running list of Windows sources and the related event ids.☆19Updated last year
- YARA rule analyzer to improve rule quality and performance☆102Updated 2 months ago
- USN Journal full path builder☆60Updated 9 months ago
- Simple PowerShell script to enable process scanning with Yara.☆93Updated 2 years ago
- This repo is where I store my Threat Hunting ideas/content☆88Updated 2 years ago
- Placeholder for my detection repo and misc detection engineering content☆42Updated last year
- Forensic Artifact Collection Tool Matrix☆85Updated 7 months ago
- ESXi Cyber Security Incident Response Script☆23Updated 9 months ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆154Updated 3 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆95Updated 2 years ago
- A C# based tool for analysing malicious OneNote documents☆114Updated 2 years ago
- VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.☆36Updated last week
- IOC Collection 2022☆57Updated 2 years ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆95Updated last year
- A small util to brute-force prefetch hashes☆77Updated 2 years ago