Tools
LogonTracer
JPCERTCC/LogonTracer
LogonTracer is a self-hosted web application for investigating Windows Active Directory logon events, graphing accounts and hosts and optionally using OpenAI models for AI-assisted threat analysis.
Topics
Related projects
chainsaw3.7kChainsaw is a fast Rust command-line tool for threat hunting through Windows forensic artefacts, applying Sigma rules to event logs and analysing MFT and SRUM data.
chainsaw3.7kChainsaw is a fast, standalone CLI for Windows forensic triage. It searches event logs and MFT artefacts, applies Sigma and custom detection rules, and builds timelines for threat hunting and incident response.
keeweb13kKeeWeb is a free cross-platform password manager that opens and creates KeePass kdbx vaults. It runs as a desktop app or in the browser, and can store credentials locally or in cloud services such as Dropbox, Google Drive and OneDrive.
zeek8.2kA powerful network security monitoring framework with deep protocol analyzers and a scripting language, used for traffic analysis, threat detection, and incident response.
tutanota8.2kTuta Mail is a secure email service with built-in end-to-end encryption for messages, contacts, and calendars, available as web, desktop, and mobile apps.
arkime7.6kArkime is a large-scale open-source full-packet capture, indexing, and analysis system that stores traffic as PCAP and offers a web interface for searching and exporting sessions.