herbiezimmerman

Windows-Event-Logs-With-Event-IDs

A running list of Windows sources and the related event ids.

2019-09-04-Trickbot

GTAG: lleo3

2019-09-18-Emotet

2019-11-21-predator

2020-02-10-predator-the-thief-malspam

2020-04-06-Unknown-RAT

2019-10-03-Ursnif-Gozi

2019-10-17-Hancitor-Maldoc

2020-02-11-hawkeye-malspam

2020-02-22-lokibot-malspam

2020-03-18-predator-the-theif-

Maldoc of Predator the Theif

2020-03-20-predator-the-thief

2020-03-23-agent-telsa

2020-03-25-agent-telsa

2020-05-27-NetSupport-RAT-malspam

2020-09-21-Emotet--Epoch-2-

2020-11-03-Node.JS-QRAT

2020-07-17-ZLoader-Malspam

2020-07-31-icedid-artifacts

2020-12-08-Hancitor-Malspam

2022-02-13-remcos-artifacts

Remcos artifacts

2022-03-14-Emotet-Malspam

2022-03-14-Emotet-Malspam-Artifacts

2022-03-28-Emotet-Malspam

2022-04-22-emotet-malspam

2022-05-13-Remcos-Malspam

2024-01-14-Remcos-RAT

bloomer1016.github.io

chainsaw_queries

A place for adding some frequently used Chainsaw queries.

powershell_malware_bazaar

powershell_vt_apiv3

PoSH script using VT apiv3