#evtx - Twitter Hashtag

5 days ago

Premium Domains : EVTX. im (Electrical Vehicles Technologies) #DomainsForSale #DomainNames #PremiumDomains #TechDomains #StartupDomains #DigitalAssets #Branding #BusinessNames #DomainInvesting #DomainBroker #WebsiteNames #TechStartup #EV #ElectricVehicles #EVTX

0

16

Josh Lemon @joshlemon

almost 2 years ago

If you're interested in getting into #Linux #logging and evidence collection, this is an excellent write-up from @Kostastsale that compares #EVTX logs on Windows with #Auditd, #SysMon for Linux, and native Linux logging. #DFIR #LinuxForensics #SIEM #CSIRT https://t.co/uukC9K0Ct2

joshlemon's tweet photo. If you're interested in getting into #Linux #logging and evidence collection, this is an excellent write-up from @Kostastsale that compares #EVTX logs on Windows with #Auditd, #SysMon for Linux, and native Linux logging.

#DFIR #LinuxForensics #SIEM #CSIRT
https://t.co/uukC9K0Ct2 https://t.co/2C2N94jEBj

0

274

112

318

24K

Security Onion

@securityonion

almost 3 years ago

#SecurityOnion 2.4 Feature o' the Day SOC can now import #PCAP and #EVTX files: https://t.co/TUpV4Wd8Wl

1

4

2

1

975

Alfon 🎸 Seguridad y Redes @seguridadyredes

almost 3 years ago

#Evtx Windows Security Event Codes - #Cheatsheet. https://t.co/LPeiJg44b6

0

3

0

293

inginformatico @inginformatico

almost 3 years ago

SearchWinEvents, Script powershell para obtener eventos de Windows #Ciberseguridad #DFIR #RespuestaAIncidentes #IncidentResponse #IR #EVTX #CiberseguridadEnEspañol https://t.co/CbZqzMiaEg

1

0

184

inginformatico @inginformatico

almost 3 years ago

Lista de eventos de seguridad críticos para revisar en un incidente de Microsoft Windows #DFIR #AnalisisForense #ForenseDigital #InformaticaForense #RespuestaAIncidentes #IR #PeritajeInformatico #IncidentResponse #evtx #eventid https://t.co/a3t3bwqLAw

0

5

2

0

570

Josh Brower @DefensiveDepth

about 3 years ago

🔥 PCAP & EVTX Upload via the Web App!? Need some EVTX files to try it out with? ---> From @SBousseaden https://t.co/sGgycyTE0H #DFIR #InfoSec #EVTX

Security Onion

@securityonion

about 3 years ago

🔥#SecurityOnion 2.4 Beta 4 now available!🔥 Featuring: ☑️PCAP/EVTX upload/import via SOC ☑️passwordless login using WebAuthn standard ☑️lots of other fixes and improvements https://t.co/OtuJk2RcEK If you like #SecurityOnion, please like and retweet! #infosec #cybersecurity

securityonion's tweet photo. 🔥#SecurityOnion 2.4 Beta 4 now available!🔥

Featuring:
☑️PCAP/EVTX upload/import via SOC
☑️passwordless login using WebAuthn standard
☑️lots of other fixes and improvements

https://t.co/OtuJk2RcEK

If you like #SecurityOnion, please like and retweet!

#infosec
#cybersecurity https://t.co/Icq1taW8x8

1

51

25

10

12K

0

9

2

0

1K

SaxX ¯\_(ツ)_/¯

@_SaxX_

over 3 years ago

Very good infographic for #RDP #DFIR within 6 steps. #threathunting #windowslogs #evtx It was made by @13CubedDFIR 1️⃣ RDP Successful Logon

_SaxX_'s tweet photo. Very good infographic for #RDP #DFIR within 6 steps.

#threathunting #windowslogs #evtx

It was made by @13CubedDFIR

1️⃣ RDP Successful Logon https://t.co/1j7ydmV6Hk

1

12

4

8

4K

Mihajlo Topic @_donzagor

over 3 years ago

Tempest - I have just completed this room! Check it out: https://t.co/BM1ZKx9992 #tryhackme #security #log analysis #sysmon #brim #wireshark #evtx #tempestincident via @tryhackme

0

2

0

103

Florian Roth ⚡️

@cyb3rops

over 3 years ago

I wrote a guide on how to use our evtx-sigma-checker tool - applies #Sigma rules to #EVTX files - outputs JSON - Linux, macOS, Windows binaries - blazingly fast (cause it uses our private go-sigma library) - it's a byproduct of our CI checks #DFIR https://t.co/5GqIFsgCbw

cyb3rops's tweet photo. I wrote a guide on how to use our evtx-sigma-checker tool

- applies #Sigma rules to #EVTX files
- outputs JSON
- Linux, macOS, Windows binaries
- blazingly fast (cause it uses our private go-sigma library)
- it's a byproduct of our CI checks

#DFIR

https://t.co/5GqIFsgCbw https://t.co/5DJLVyXF5a

0

137

44

27

19K

VOiD @Ayush_Panwar_1

over 3 years ago

Tempest - I have just completed this room! Check it out: https://t.co/4etwLiEH0K #tryhackme #security #log analysis #sysmon #brim #wireshark #evtx #tempestincident via @tryhackme

Ayush_Panwar_1's tweet photo. Tempest - I have just completed this room! Check it out: https://t.co/4etwLiEH0K #tryhackme #security #log analysis #sysmon #brim #wireshark #evtx #tempestincident via @tryhackme https://t.co/Tgz1V1lvJY

0

2

0

thecyberwolf @th3Cyb3rW0lf

over 3 years ago

Day 86 of #100DaysOfHacking challenge Blue teaming is hard 😥😥😥 Tempest - I have just completed this room! Check it out: https://t.co/mgiI8gQwft #tryhackme #security #loganalysis #sysmon #brim #wireshark #evtx #tempestincident via @tryhackme

0

1

0

inginformatico @inginformatico

almost 4 years ago

Techniques and Tools for Logs Forensic Analysis ... My article in "Digital Forensics Magazine". #DFIR #Forensics #Logs #evtx #EventLogExplorer #TimelineExplorer #EvtxECmd @eventlogxp @EricRZimmerman @DFMag https://t.co/U0u8DFRDIH

0

13

1

0

inginformatico @inginformatico

about 4 years ago

Windows Security Log Events Encyclopedia: Windows Audit, SharePoint Audit (LOGbinder for SharePoint), SQL Server Audit (LOGbinder for SQL Server), Exchange Audit (LOGbinder for Exchange), Sysmon (MS Sysinternals Sysmon) #DFIR #EVT #EVTX #EventIDs https://t.co/ZdGNX4Hecw

inginformatico's tweet photo. Windows Security Log Events Encyclopedia:
Windows Audit, SharePoint Audit (LOGbinder for SharePoint), SQL Server Audit (LOGbinder for SQL Server), Exchange Audit (LOGbinder for Exchange), Sysmon (MS Sysinternals Sysmon) #DFIR #EVT #EVTX #EventIDs https://t.co/ZdGNX4Hecw https://t.co/3ym8w6HYeY

0

2

0

1

0

Alfon 🎸 Seguridad y Redes @seguridadyredes

over 4 years ago

#Beagle is an incident response and digital forensics tool which transforms data sources and logs into graphs. Supported data sources include FireEye HX Triages, Windows #EVTX files, #SysMon logs and Raw Windows memory images. https://t.co/iM4rOFKlRz

3

25

19

8

0

Alfon 🎸 Seguridad y Redes @seguridadyredes

over 4 years ago

It allows to use #SIGMA rules on MS Windows #EVTX (EVTX and JSONL format), Auditd logs and #Sysmon for Linux logs. #zircolite_win10_embedded.exe -e "C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx" --genericfull jq . detected_events.json

$seguridadyredes's tweet photo. It allows to use #SIGMA rules on MS Windows #EVTX (EVTX and JSONL format), Auditd logs and #Sysmon for Linux logs. #zircolite_win10_embedded.exe -e "C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx" --genericfull jq . detected_events.json https://t.co/PDLJqR4QAy$

1

4

5

1

0

Alfon 🎸 Seguridad y Redes @seguridadyredes

over 4 years ago

#Live_Forensicator. POWERSHELL SCRIPT TO AID LIVE FORENSICS & INCIDENCE RESPONSE. Is part of the Black Widow Toolbox, its aim is to assist Forensic Investigators and Incidence responders in carrying out a quick live forensic investigation. #EVTX https://t.co/8lkKMVjifJ

0

2

1

0

EdiAcoo @AcooEdi

over 4 years ago

Epagneul - Graph Visualization For Windows Event Logs https://t.co/zoxg3i3tid #Blueteam #DfirAutomation #Epagneul #Evtx via KitPloit

AcooEdi's tweet photo. Epagneul - Graph Visualization For Windows Event Logs https://t.co/zoxg3i3tid #Blueteam #DfirAutomation #Epagneul #Evtx via KitPloit https://t.co/RRrqswKSUN

0

3

4

0

Gigasheet @gigasheet

over 4 years ago

Powershell exploit traces live in your Windows EVTX files. Here's how to quickly hunt for them, no engineering or set-up required. https://t.co/mQHPGZAgYk #threathunting #powershell #evtx #blueteamsec #windowssec #dfir #cyber

0

4

0

1

0

Gigasheet @gigasheet

over 4 years ago

Stay in tonight and cozy up with a warm cup of data. Get your free account at https://t.co/OFstKPMf3d and analyze huge #CSV #LOG #EVTX #JSON instantly.

gigasheet's tweet photo. Stay in tonight and cozy up with a warm cup of data. Get your free account at https://t.co/OFstKPMf3d and analyze huge #CSV #LOG #EVTX #JSON instantly. https://t.co/dxnYMp8nrK

0

2

1

0

Top Tweets for #evtx

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users