Windows Events Attack Samples
-
Updated
Jan 24, 2023 - HTML
GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
evtxHere are 123 public repositories matching this topic...Language: All
Filter by language
Sort: Most stars
Sort options
Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
detection logs python3 forensics dfir sysmon auditd sigma evtx sigma-rules dfir-automation forensics-tools pysigma dfir-tools evtxtract
Windows Event Log tooling for PowerShell and .NET: typed queries, reporting, export, WEC, automation, and the PSEventViewer module.
windows monitoring csharp dotnet powershell reporting activedirectory event-log powershell-module wec evtx windows-event-log
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
Free, open-source CMTrace replacement for Windows log files: ConfigMgr/SCCM, Intune IME, and Autopilot ESP diagnostics, DSRegCmd triage, .evtx viewing, real-time tailing, and Windows error-code lookup. Windows, macOS, Linux.
windows rust log-viewer sysadmin sccm configmgr mdm troubleshooting intune microsoft-intune tauri evtx cmtrace mecm dsregcmd windows-autopilot endpoint-management entra-id event-log-viewer enrollment-status-page
Graph Visualization for windows event logs
security forensics threat-hunting hunting blueteam security-tools evtx dfir-automation forensics-tools
evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
Parse evtx files and detect use of the DanderSpritz eventlogedit module
ThreatSeeker: Threat Hunting via Windows Event Logs
Load Windows Event Log (.evtx) files into Elasticsearch, or export them as JSON lines. Born on an offline threat hunt; rebuilt for Elasticsearch 9.
python elasticsearch log-analysis incident-response forensics dfir threat-hunting security-tools blue-team evtx windows-event-log
A tool to parse Windows Event Logs and import them into Elasticsearch.
Active Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)
python incident-response active-directory forensics dfir threat-hunting siem blue-team evtx windows-security
Self-hosted multi-engine Sigma detection for event logs
security log-analysis logs self-hosted dfir cti sigma soc blue-team evtx threat-detection sigma-rules
Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.
rust neo4j vss incident-response dfir graph-database event-log threat-hunting digital-forensics cypher ual evtx kape lateral-movement velociraptor memgraph digital-forensics-incident-response windows-forensics digital-forensic-tool forensic-tool
Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.
windows analytics analysis dotnet powershell detection logging logs cybersecurity sysmon siem hunting forwarder defense eventlog log-forwarder evtx logging-framework logging-agent windowsevents
Add this topic to your repoTo associate your repository with the evtx topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |