Found 3 repositories(showing 3)
wagga40
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
williballenthin
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
bnezy-c
这个工具的功能是将 Windows 事件日志（EVTX）转换为结构化的 JSON 数据，并进行一系列处理
All 3 repositories loaded