Dfir
- Events Never Lie
A pile of Windows .evtx logs and a four-part question set, answered by hunting the events with Chainsaw and the Sigma ruleset.
A pile of Windows .evtx logs and a four-part question set, answered by hunting the events with Chainsaw and the Sigma ruleset.