Chainsaw 2.9.0
|
Author:
F-Secure Countercept
Date: 04/15/2024 Size: 3 MB License: Open Source Requires: 11|10|8|7|Linux|macOS Downloads: 2912 times 
TIP:
Click Here to Repair orRestore Missing Windows Files |
Major Geeks Special Offer:
Chainsaw allows advanced users to search and hunt through Windows Event Logs rapidly.
Chainsaw provides a powerful ‘first-response’ capability to identify threats within Windows event logs quickly. It offers a generic and fast method of searching through event logs for keywords and identifying threats using built-in detection logic and support for Sigma detection rules.
Features:
Search and extract event log records by event IDs, string matching, and regex patterns
Hunt for threats using Sigma detection rules and custom built-in detection logic
Lightning fast, written in rust, wrapping the EVTX parser library by OBenamram
Document tagging (detection logic matching) provided by the TAU Engine Library
Output in an ASCII table format, CSV format, or JSON format
Chainsaw is designed for advanced users who are comfortable using the Command Prompt. Chainsaw would be most useful for technicians, administrators, or IT.
If you want to see how to program looks, run the following command from the folder you extracted the files to:
./chainsaw hunt evtx_attack_samples/ --rules sigma_rules/ --mapping mapping_files/sigma-mapping.yml
Similar:
How to Clear All Event Logs in Event Viewer in Windows
How to Read the Event Viewer Log for Check Disk
Chainsaw provides a powerful ‘first-response’ capability to identify threats within Windows event logs quickly. It offers a generic and fast method of searching through event logs for keywords and identifying threats using built-in detection logic and support for Sigma detection rules.
Features:
Chainsaw is designed for advanced users who are comfortable using the Command Prompt. Chainsaw would be most useful for technicians, administrators, or IT.
If you want to see how to program looks, run the following command from the folder you extracted the files to:
./chainsaw hunt evtx_attack_samples/ --rules sigma_rules/ --mapping mapping_files/sigma-mapping.yml
Similar:
Screenshot for Chainsaw
Tactical Briefings
Comment Rules & Etiquette - We welcome all comments from our readers, but any comment section requires some moderation. Some posts are auto-moderated to reduce spam, including links and swear words. When you make a post, and it does not appear, it went into moderation. We are emailed when posts are marked as spam and respond ASAP. Some posts might be deleted to reduce clutter. Examples include religion, politics, and comments about listing errors (after we fix the problem and upvote your comment). Finally, be nice. Thank you for choosing MajorGeeks.
© 2000-2024 MajorGeeks.com
Powered by Contentteller® Business Edition