DeepBlueCLI
Download DeepBlueCLI, built by SANS fellow Eric Conrad, A PowerShell Module for Threat Hunting via Windows Event Log. ,2021年8月20日 — DeepBlueCLI is an open-source framework that automatically parses Windows event logs, either on Windows (PowerShell version) or now on ELK ... ,2023年9月28日 — DeepBlueCLI uses module logging (PowerShell event 4103) and script block logging (4104). It does not use transcription. See: ... ,,DeepBlueCLI uses module logging (PowerShell event 4013) and script block logging (4104). It does not use transcription. See: https://www.fireeye.com/blog/threat ... ,DeepBlueCLI outputs in PowerShell objects, allowing a variety of output methods and types, including JSON, HTML, CSV, etc. For example: ... ,2021年4月28日 — I am going to use a free open source threat hunting tool called DeepBlueCLI by Eric Conrad that demonstrates some amazing detection capabilities ... ,This talk will focus on the latest updates to DeepBlueCLI, including detecting Impacket and WMI-based attacks, C2 frameworks such as Sliver, password spraying, ... ,2023年11月27日 — 基于Windows日志的电子证据获取与分析方法研究 · 为解决Windows日志的实时获取问题，针对2种日志文件格式，分别提出了相应的日志实时获取方法。在实时获取 ...,2022年12月2日 — 此平台以推廣第一個針對繁體中文使用者設計的開源資安工具為目標，透過易於理解的教學和資訊分享，協助使用者更有效地運用工具實現網路安全。在這個 ...
| 相關軟體 Event Log Explorer 資訊 | |
|---|---|
 DeepBlueCLI 相關參考資料
DeepBlueCLI
Download DeepBlueCLI, built by SANS fellow Eric Conrad, A PowerShell Module for Threat Hunting via Windows Event Log. https://www.sans.org DeepBlueCLI – PowerShell Module for Threat Hunting
2021年8月20日 — DeepBlueCLI is an open-source framework that automatically parses Windows event logs, either on Windows (PowerShell version) or now on ELK ... https://www.socinvestigation.c Incident response and Threat hunting using Deepbluecli tool
2023年9月28日 — DeepBlueCLI uses module logging (PowerShell event 4103) and script block logging (4104). It does not use transcription. See: ... https://mahim-firoj.medium.com Quick Forensics of Windows Event Logs (DeepBlueCLI)
https://www.youtube.com r3p3rsans-blue-team-DeepBlueCLI
DeepBlueCLI uses module logging (PowerShell event 4013) and script block logging (4104). It does not use transcription. See: https://www.fireeye.com/blog/threat ... https://github.com sans-blue-teamDeepBlueCLI
DeepBlueCLI outputs in PowerShell objects, allowing a variety of output methods and types, including JSON, HTML, CSV, etc. For example: ... https://github.com Threat hunting using DeepBlueCLI — a PowerShell ...
2021年4月28日 — I am going to use a free open source threat hunting tool called DeepBlueCLI by Eric Conrad that demonstrates some amazing detection capabilities ... https://abdul-samadh.medium.co Threat Hunting via DeepBlueCLI v3
This talk will focus on the latest updates to DeepBlueCLI, including detecting Impacket and WMI-based attacks, C2 frameworks such as Sliver, password spraying, ... https://www.sans.org 使用DeepBlueCLI对Windows日志进行取证（小记） 原创
2023年11月27日 — 基于Windows日志的电子证据获取与分析方法研究 · 为解决Windows日志的实时获取问题，针对2种日志文件格式，分别提出了相应的日志实时获取方法。在实时获取 ... https://blog.csdn.net 開源威脅獵捕工具- DeepBlueCLI - SecTools.tw
2022年12月2日 — 此平台以推廣第一個針對繁體中文使用者設計的開源資安工具為目標，透過易於理解的教學和資訊分享，協助使用者更有效地運用工具實現網路安全。在這個 ... https://sectools.tw |