
arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
defensive-toolsdigital-forensicsforensics+7
7.5k

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Proof-of-concept demonstrating log injection and poisoning in Splunk via crafted URL parameters, highlighting OWASP log injection risks.