AWS CloudTrail
Track user activity and API usage on AWS and in hybrid and multicloud environments.
Browse a library of EQL analytics now natively integrated in Elasticsearch since Endgame joined forces with Elastic. EQL in Elasticsearch accommodates non-security users with changes summarized in the Elasticsearch EQL documentation. Get started by installing the EQL module with Python 2.7 and 3.5+, then try a sample json file and test it with EQL commands.
Track user activity and API usage on AWS and in hybrid and multicloud environments.
A Command Line Map-Reduce tool for analyzing cowrie log files over time and creating visualizations and statistics.
Tool for deleting logs on Linux/Windows servers.
Logdissect is a CLI utility and Python library for analyzing log files and other data.
HoneyView is a tool for analyzing honeyd logfiles graphically and textually.
Windows Event Log Analyzer with logon timeline generator and noise reduction for fast forensics.