evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

APT-Hunter

APT-Hunter APT-Hunter 是一款针对 Windows 事件日志的威胁狩猎工具，采用紫队思维设计，用于检测隐藏在大量 Windows 事件日志中的 APT 活动，从而缩短发现可疑行为的时间。APT-Hunter 使用预定义的检测规则，并专注于统计分析以发现异常，这在入侵评估中非常有效。输出结果包含时间线，可直接在 Excel、Timeline Explorer、Timesketch 等工具中进行分析。...

APT-Hunter - Threat Hunting Tool For Windows Event Logs Which Made By Purple Team Mindset To Provide Detect APT Movements Hidden In The Sea Of Windows Event Logs To Decrease The Time To Uncover Suspicious Activity

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity . this tool will make a good use of the windows event logs collected and make sure...