SysmonSearch in meirwah/awesome-incident-response

Investigate suspicious activity by visualizing Sysmon's event log

updated at May 31, 2024, 11:57 a.m.

43 +0

412 +0

58 +0

MalConfScan in meirwah/awesome-incident-response

Volatility plugin for extracts configuration data of known malware

updated at June 19, 2024, 10:23 a.m.

36 +0

476 +1

68 +0

LogonTracer in meirwah/awesome-incident-response, fabacab/awesome-cybersecurity-blueteam

Investigate malicious Windows logon by visualizing and analyzing Windows event log

updated at June 21, 2024, 6:06 a.m.

136 +0

2,654 +2

441 +0