GitHub topics: windows-event-logs
ahmedkhlief/APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Language: Python - Size: 1.63 MB - Last synced at: 12 days ago - Pushed at: 8 months ago - Stars: 1,340 - Forks: 244
Compcode1/ioc19-unauthorized-7045
This case study captures a classic example of attacker persistence using a built-in operating system feature: the Windows service framework. Through the lens of Event ID 7045, the attacker installed a background service named WinUpdateHelper, masked to resemble a legitimate update utility.
Language: Jupyter Notebook - Size: 0 Bytes - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0
carina-studio/ULogViewer
Cross-Platform Universal Log Viewer.
Language: C# - Size: 51.4 MB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 470 - Forks: 44
jrdnbradford/Windows-Event-Monitor 📦
Python 3-based multithreaded Windows Event monitoring program
Language: Python - Size: 18.6 KB - Last synced at: 26 days ago - Pushed at: almost 4 years ago - Stars: 2 - Forks: 3
rhejos/soc-detection-lab
Detection engineering lab using Splunk, Sigma, and Windows logs — mapped to MITRE ATT&CK
Size: 1.95 KB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0
iscmt/event-parser
Parses and imports a Windows Log File (CSV) into a Microsoft SQL Server Database.
Language: C# - Size: 23.4 KB - Last synced at: 3 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0
nagilum/eventy
Console Windows event log viewer
Language: C# - Size: 32.2 KB - Last synced at: about 2 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0
blackhillsinfosec/EventLogging
Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
Language: PowerShell - Size: 255 KB - Last synced at: about 1 year ago - Pushed at: over 1 year ago - Stars: 447 - Forks: 66
S3mprGumb1/whodunnit
A PS forensics tool for Scraping, Filtering and Exporting Windows Event Logs
Language: PowerShell - Size: 380 KB - Last synced at: 11 months ago - Pushed at: almost 6 years ago - Stars: 17 - Forks: 3
kfallahi/WinAuthLogParser
Parses and Analyse Authentication on Windows Event Log
Language: PowerShell - Size: 4.88 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0
RandomRhythm/wEventLogSearch
Search Windows event log and output results to a text file
Language: C# - Size: 73.2 KB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 2 - Forks: 1
