TCH SY SyntheticSecurity · SyntheticSecurity Use Chainsaw , the powerful evtx (win event log) parsing tool to improve your threat analysis — A… Chainsaw is an awesome tool to “rapidly search and hunt through windows forensic artefacts”. Say you have a server which has been taken…
TCH HUM SY SyntheticSecurity · SyntheticSecurity How To Not Overlook Important Windows Event IDs During Threat Analysis and Learning About Mimikatz… Edit: 6/8/23 (Corrections regarding ID 4719)