HistoricProcessTree
Pythonpushed over 8 years ago
An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.
AI summary
Process tree visualization tool
Analyzes Windows event log data to visualize historic process execution evidence in a tree view.
- stars
- 59
- forks
- 6
- watching
- 5