timeliner

Event log analyzer

A tool for filtering and analyzing Windows event logs based on complex time-based conditions

A rewrite of mactime, a bodyfile reader

GitHub

36 stars
8 watching
6 forks
Language: Go
last commit: 4 months ago
Linked from 1 awesome list

bodyfiledfirforensicsmactime

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
reed1713/elat A toolset for analyzing Windows event logs to detect and analyze malware 29
sans-blue-team/deepbluecli A PowerShell module for analyzing Windows event logs to detect and respond to potential security threats. 2,188
yamato-security/wela Analyzes Windows Event Logs to identify security-related events and provides forensic tools for incident response. 763
thiber-org/userline Automates analysis of Windows Security Events to identify user logon relations 240
ember-best-practices/ember-perf-timeline An addon that helps developers analyze performance in Ember applications by adding instrumentation to Chrome's Timeline. 98
jpcertcc/toolanalysisresultsheet An HTML-based tool for analyzing and visualizing log data from Windows execution of malicious tools to detect lateral movement. 345
jpcertcc/sysmonsearch Analyzes Sysmon event logs to detect suspicious activity and visualize process and network correlations. 417
ahmedkhlief/apt-hunter A tool to analyze Windows event logs for signs of APT attacks and malware activity. 1,255
bromiley/olaf An O365 investigation framework providing tools and analysis techniques for analyzing Office 365 logs to aid in security investigations. 81
carina-studio/ulogviewer A tool for analyzing and visualizing log data from various sources 407
eldy/awstats Analyzer software for web server log files 378
esrlabs/chipmunk A tool for analyzing and searching logfiles in large files 566
zix99/rare A tool that provides fast and efficient text analysis and visualization capabilities 274
airbnb/streamalert An automated log analysis and alerting system for real-time threat detection and incident response. 2,861
jensvoid/lorg A tool to analyze and detect security incidents in web application logs 209