
DShield-SIEM
DShield Sensor Log Collection with ELK
defensive-toolsincident-responseintrusion-detection+4
50

DShield Sensor Log Collection with ELK

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation

This is a repo for fetching Applocker event log by parsing the win-event log