Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
Repository Index
47,133 repositories indexed
1–3 of 3 · Most stars
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.