mirror of
https://github.com/pe3zx/my-infosec-awesome.git
synced 2025-01-25 06:46:46 -05:00
Add: airbus-cert/Winshark to DFIR section
This commit is contained in:
parent
4bfdaf7569
commit
64f861b558
@ -1333,6 +1333,10 @@ This repository is created as an online bookmark for useful links, resources and
|
||||
<td><a href="https://github.com/ahmedkhlief/APT-Hunter">ahmedkhlief/APT-Hunter</a></td>
|
||||
<td>APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="https://github.com/airbus-cert/Winshark">airbus-cert/Winshark</a></td>
|
||||
<td>A wireshark plugin to instrument ETW</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><a href="https://www.alienvault.com/products/ossim">AlienVault OSSIM</a></td>
|
||||
<td>AlienVault OSSIM: The World’s Most Widely Used Open Source SIEM</td>
|
||||
|
Loading…
Reference in New Issue
Block a user