diff --git a/README.md b/README.md index 858b328..7bbb13b 100644 --- a/README.md +++ b/README.md @@ -1665,6 +1665,10 @@ This repository is created as an online bookmark for useful links, resources and williballenthin/process-forest process-forest is a tool that processes Microsoft Windows EVTX event logs that contain process accounting events and reconstructs the historical process heirarchies. + + XForceIR/SideLoadHunter + SideLoadHunter is a PowerShell script and Sysmon configuration designed to aide defenders and incident responders identify evidence of DLL sideloading on Windows systems. + yampelo/beagle Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.