From fe9ee8ce862404b2ec03e37dd602ade2c70bcb14 Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Thu, 30 Dec 2021 14:06:24 +0000 Subject: [PATCH] Added Cahinsaw log analysis tool. Added Cahinsaw log analysis tool. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index ab65b13..471bf63 100644 --- a/README.md +++ b/README.md @@ -144,6 +144,7 @@ Digital Forensics and Incident Response (DFIR) teams are groups of people in an * [AppCompatProcessor](https://github.com/mbevilacqua/appcompatprocessor) - AppCompatProcessor has been designed to extract additional value from enterprise-wide AppCompat / AmCache data beyond the classic stacking and grepping techniques. * [APT Hunter](https://github.com/ahmedkhlief/APT-Hunter) - APT-Hunter is Threat Hunting tool for windows event logs. +* [Chainsaw](https://github.com/countercept/chainsaw) - Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows event logs. * [Event Log Explorer](https://eventlogxp.com/) - Tool developed to quickly analyze log files and other data. * [Event Log Observer](https://lizard-labs.com/event_log_observer.aspx) - View, analyze and monitor events recorded in Microsoft Windows event logs with this GUI tool. * [Kaspersky CyberTrace](https://support.kaspersky.com/13850) - Threat intelligence fusion and analysis tool that integrates threat data feeds with SIEM solutions. Users can immediately leverage threat intelligence for security monitoring and incident report (IR) activities in the workflow of their existing security operations.