LogonTracer in meirwah/awesome-incident-response, fabacab/awesome-cybersecurity-blueteam

Investigate malicious Windows logon by visualizing and analyzing Windows event log

created at Nov. 24, 2017, 6:07 a.m.

Python

136 +0

2,633 +3

441 +1

GitHub
MalConfScan in meirwah/awesome-incident-response

Volatility plugin for extracts configuration data of known malware

created at April 22, 2019, 12:23 a.m.

Python

36 +0

469 +1

68 +0

GitHub
SysmonSearch in meirwah/awesome-incident-response

Investigate suspicious activity by visualizing Sysmon's event log

created at July 31, 2018, 11:25 p.m.

JavaScript

44 +0

409 +0

58 +0

GitHub