A repository providing guidance on collecting security-relevant Windows event logs using Windows Event Forwarding (WEF).
All security tools
2,963 results · page 38
Event Log Explorer is a software solution for viewing, analyzing, and monitoring events recorded in Microsoft Windows event logs, offering advanced features and efficient filtering capabili…
Browse a library of EQL analytics now natively integrated in Elasticsearch.
Generate a variety of suspect actions detected by Falco rulesets.
A cross-platform tool for creating malicious MS Office documents with hidden VBA macros and anti-analysis features.
Man-in-the-middle attack framework used for phishing credentials and session cookies.
A standalone man-in-the-middle attack framework used for phishing login credentials and bypassing 2-factor authentication.
A tool for generating unicode domains for IDN homograph attacks, allowing creation of lookalike URLs for phishing campaigns.
EvoMaster is an open-source tool that automatically generates system-level test cases for web APIs using AI-driven techniques.
A tool for fixing acquired .evt Windows Event Log files in digital forensics.
Exabeam Security Operations Platform is a cloud-native security platform that applies AI and automation to security operations workflows for threat detection, investigation, and response.
A public domain for use in illustrative examples in documents.
A blog post about bypassing AppLocker using PowerShell diagnostic scripts
A command-line utility to show and change EXIF information in JPEG files
Advanced image metadata analysis tool providing metadata extraction, digital signature verification, image source identification, and manipulation detection features.
Read, write and edit metadata in files.
Exiv2 is a C++ library and command-line utility for image metadata manipulation.
Check if an IP address was used as a Tor relay on a given date.
Collection of vulnerable ARM binaries for beginner vulnerability researchers & exploit developers.
A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.
Very vulnerable ARM/ARM64[AARCH64] application with various levels of vulnerabilities for exploitation training.
A freeware suite of tools for PE editing and process viewing, including CFF Explorer and Resource Editor.
A comprehensive analysis of AWS IAM Access Analyzer, evaluating its capabilities, limitations, and effectiveness in identifying publicly exposed AWS resources.
A honeypot for remote file inclusion (RFI) and local file inclusion (LFI) using fake URLs to catch scanning bots and malwares.
Load more tools
Showing 912 of 2,963