LogonTracer in meirwah/awesome-incident-response, fabacab/awesome-cybersecurity-blueteam

Investigate malicious Windows logon by visualizing and analyzing Windows event log

updated at May 24, 2024, 12:36 p.m.

136 +0

2,642 +7

440 -1

MalConfScan in meirwah/awesome-incident-response

Volatility plugin for extracts configuration data of known malware

updated at May 23, 2024, 7:16 a.m.

36 +0

472 +1

68 +0

SysmonSearch in meirwah/awesome-incident-response

Investigate suspicious activity by visualizing Sysmon's event log

updated at May 20, 2024, 2:51 p.m.

44 +0

410 +1

58 +0