Chainsaw: Open-source tool for hunting through Windows forensic artefacts
Chainsaw is an open-source first-response tool for quickly detecting threats in Windows forensic artefacts, including Event Logs and the MFT file. It enables fast keyword searches through event logs and identifies threats using built-in Sigma detection and custom detection rules. Chainsaw features Hunt for threats using Sigma detection rules and custom detection rules Search and extract forensic artefacts by string matching and regex patterns Create execution timelines by analyzing Shimcache artefacts and enriching them with … More → The post Chainsaw: Open-source tool for hunting through Windows forensic artefacts appeared first on Help Net Security.http://news.poseidon-us.com/THKHyy
