
ADFT
Active Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)
configuration-auditingdigital-forensicsforensics+3

Active Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)

High-speed Windows forensic triage platform that orchestrates the Hayabusa engine to transform raw EVTX logs into prioritized threat timelines with…

Evtx Log (xml) Browser

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs