ekitji Goto Github PK

deepbluecli

evtx

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

evtx-1

Merge evtx files

evtx-attack-samples

Windows Events Attack Samples

evtx-baseline

A repository hosting example goodware evtx logs containing sample software installation and basic user interaction

evtx-samples

EvtIDs & TTPs

evtx-sathishdsgithub

Windows Events Samples

evtx-to-mitre-attack

Set of EVTX samples (>270) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.

files

Files

hayabusa-sample-evtx

Sample evtx files to use for testing hayabusa detection rules

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

malware-evtx

恶意软件日志合集

mitreattackevtx

ohmymalware

Malware detonation logs in ndjson format

remotemanagementmonitoringtools

Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

security-datasets

Re-play Security Events

shodan_ps

A collection of PowerShell modules for interacting with the Shodan API. Includes modules for returning information about the API, client IP, DNS, exploits, honeypot scores, hosts, ports, profiles, and scans. Shodan API key required. Query and scan credits used.

sysmonresources

Consolidation of various resources related to Microsoft Sysmon & sample data/log

threathunting-keywords

Awesome list of keywords for Threat Hunting sessions