Mihir-Choudhary/EventHawk

Rapidly Search and Hunt through Windows Forensic Artefacts

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

A tool to parse Windows Event Logs and import them into Elasticsearch.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

Active Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)

Load Windows Event Log (.evtx) files into Elasticsearch, or export them as JSON lines. Born on an offline threat hunt; rebuilt for Elasticsearch 9.

Investigate malicious Windows logon by visualizing and analyzing Windows event log

A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts