hayabusa-sample-evtx
Sample evtx files to use for testing hayabusa detection rules
AI summary
EVTX files
A collection of sample event log files used for testing and development of threat detection rules
- stars
- 45
- forks
- 3
- watching
- 5
Similar projects
Found by comparing what the projects do, not just their names.
Attack log repository
A repository of Windows Event log samples associated with various attack and post-exploitation techniques.
Log indicators
Provides Windows log event indicators mapped to MITRE ATT&CK tactic and techniques
Event log repair tool
Tool to repair Windows Event Log files (.evt) acquired during forensic investigations
Log setup script
Enables Windows event log settings to support a larger percentage of Sigma detection rules and retain logs for longer periods
Signature generator
Generates Yara signatures for identifying malware code similarities
Event log parser
A Python module for parsing Windows Event Log files (.evtx) into structured data
Malware detectors
Rules and patterns used to identify malicious software
Event log parser
Tool to parse Event Viewer logs and extract useful information
Desktop App Demo
A sample application demonstrating the use of APX MVC library and ORMlite for building a desktop app with SQLite database integration
Event log reconstruction tool
Reconstructs fragments of event log data from raw binary files, including unallocated space and memory images.
Malware detector ruleset
A centralized repository of Yara rules for detecting malware and other malicious activities.
Malware detector generator
Automates the creation of Yara rules to detect malware and other malicious objects of interest by analyzing sample files from various sources.
Intelligence archive
A repository of threat intelligence data from public Volexity blog posts.
Malware detector library
A collection of Yara rules for detecting malware and other malicious patterns
Burp check extender
Security checks pack for Burp Suite that extends its functionality with plugins containing active and passive security checks.