Threat Management

event-log

DeepBlueCLI

0 (0)

A PowerShell module for threat hunting via Windows Event Logs

ProcFilter

0 (0)

ProcFilter is a process filtering system for Windows with built-in YARA integration, designed for malware analysts to create YARA signatures for Windows environments.

Windows EVTX Samples [200 EVTX examples]

0 (0)

Container of 200 Windows EVTX samples for testing detection scripts and training on DFIR.