EnableWindowsLogSettings
Documentation and scripts to properly enable Windows event logs.
AI summary
Log setup script
Enables Windows event log settings to support a larger percentage of Sigma detection rules and retain logs for longer periods
- stars
- 571
- forks
- 51
- watching
- 15
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Event log analyzer
Analyzes Windows Event Logs to identify security-related events and provides forensic tools for incident response.
Event log analyzer
Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity.
sigmahq/sigma8.5K
Log event descriptor
A standardized format for describing log events to facilitate detection and analysis of security threats
Log analyzer
Automates analysis of Windows Security Events to identify user logon relations
Log analyzer
A standalone tool for analyzing and detecting security-related events in various Linux logs using SIGMA rules
Event log repair tool
Tool to repair Windows Event Log files (.evt) acquired during forensic investigations
Log converter
Converts Linux audit logs into standardized JSON format for enhanced security monitoring
Event logging guide
Provides guidance on configuring and collecting Windows event logs to enhance forensic analysis and incident response capabilities.
Event tracing collection
Collects and analyzes Windows 10 event tracing data from various providers across different versions.
Event log analyzer
Analyzes Sysmon event logs to detect suspicious activity and visualize process and network correlations.
Log file system
Mounts AWS CloudWatch Logs as a file system
Event log analyzer
A PowerShell module for analyzing Windows event logs to detect and respond to potential security threats.
WMI logger
Logs WMI consumer and process creation events to the Windows Application event log
Windows log collector
Provides an advanced Splunk configuration for collecting Windows log data relevant to threat detection, incident response, and forensic analysis.
DCOM scanner
Automates enumeration of vulnerable DCOM applications to aid in lateral movement and exploitation testing
Featured in 1 awesome list
Each link jumps to the spot where the list mentions EnableWindowsLogSettings.
