4 tools and resources
A PowerShell module for threat hunting via Windows Event Logs
A threat hunting tool for Windows event logs to detect APT movements and decrease the time to uncover suspicious activity.
ELAT (Event Log Analysis Tool) is a tool that helps in analyzing Windows event logs for malware detection.
SysmonSearch makes event log analysis more effective by aggregating Microsoft Sysmon logs and providing detailed analysis through Elasticsearch and Kibana.
