LogonTracer in meirwah/awesome-incident-response, fabacab/awesome-cybersecurity-blueteam

Investigate malicious Windows logon by visualizing and analyzing Windows event log

created at Nov. 24, 2017, 6:07 a.m.

Python

136 +0

2,735 +6

443 +0

GitHub
MalConfScan in meirwah/awesome-incident-response

Volatility plugin for extracts configuration data of known malware

created at April 22, 2019, 12:23 a.m.

Python

36 +0

485 +2

67 +0

GitHub
SysmonSearch in meirwah/awesome-incident-response

Investigate suspicious activity by visualizing Sysmon's event log

created at July 31, 2018, 11:25 p.m.

JavaScript

43 +0

417 +0

58 +0

GitHub