issues
search
WithSecureLabs
/
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
GNU General Public License v3.0
2.7k
stars
242
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Check for potential I/0 error before processing
#121
jfstenuit
closed
1 year ago
1
keyless identifiers cannot be converted
#120
nbareil
closed
1 year ago
3
Tests
#117
56616c6f72
closed
1 year ago
0
WIP Draft: Shimcache execution timeline feature with Amcache enrichment
#116
Markus98
closed
1 year ago
2
Hunt with WEC/WEF
#115
Flexxi51
closed
1 year ago
2
Invalid Tau Key Pair error
#114
clareesespieces
closed
1 year ago
2
Deserialization error does't not show responsible file
#109
m-terlinde
closed
1 year ago
2
Add timestamp format to help output
#108
m-terlinde
closed
1 year ago
2
Definition of "logsource" values like product or category.
#107
Maspital
opened
1 year ago
12
Cleaning
#106
FranticTyping
closed
1 year ago
0
Jsonl addeed.
#105
56616c6f72
closed
1 year ago
0
Incorrect hunt examples displayed
#104
Cleako
closed
1 year ago
1
Count column
#103
mkwired
closed
12 months ago
9
Chainsaw uses a lot of RAM when processing large individual files with a large number of detections
#102
KRUXLEX
closed
1 year ago
29
Issue with linux bash execution by multi directories
#101
KRUXLEX
closed
1 year ago
0
chrono-tz phf dependency
#100
chronocrate
closed
1 year ago
6
Chainsaw 2 Doesn't Recognize .evt Files
#99
RossMadness
closed
1 year ago
1
Adding MFT parsing
#98
dolly-parseton
closed
1 year ago
1
Added MFT parsing
#97
dolly-parseton
closed
1 year ago
0
Issue with CSV output not populating "Event Data" row
#96
danielgottt
closed
2 years ago
2
Is it possible to parse .json/.jsonl files that contain other log formats?
#95
Maspital
closed
2 years ago
5
Inconsistent data type parsing between JSON and XML
#94
ancailliau
closed
1 year ago
3
Update README: Change the folder(evtx,sigma) name specified in the command
#93
fukusuket
closed
2 years ago
2
update README
#92
deleonroselle21
closed
2 years ago
1
Issue opened in error
#91
ramanathanc7
closed
2 years ago
0
--skip-errors fails on File System errors
#90
dsplice
closed
2 years ago
21
Sigma.csv Formatting
#89
b1draper
closed
2 years ago
17
Release v2.0.0-beta.0 codebase in Master
#88
FranticTyping
closed
2 years ago
0
docs: building out README and help output for v2 release
#87
FranticTyping
closed
2 years ago
0
refactor: preparsing file extensions logic
#86
FranticTyping
closed
2 years ago
3
feat: parse rule and mapping files to determine file extensions to load
#85
FranticTyping
closed
2 years ago
0
Problem to identify matched signature due to Sigma rules with similar information
#84
jvmendezp
closed
2 years ago
3
chore: cleaning up tau error message on invalid key pair
#83
FranticTyping
closed
2 years ago
0
fix: use evtx extension by default for loading event logs
#82
FranticTyping
closed
2 years ago
3
James/tweaks
#81
FranticTyping
closed
2 years ago
0
Shrink unsafe blocks
#80
peamaeq
closed
2 years ago
2
James/tweaks
#79
FranticTyping
closed
2 years ago
0
--lateral-all does not return correct output when mode set to JSON
#78
grants235
closed
2 years ago
1
failed to parse manifest at
#76
purplebyteone
closed
2 years ago
3
Evtx files with different extension
#75
jurelou
closed
2 years ago
4
Add sigma metadatas in results
#74
jurelou
closed
2 years ago
7
Docs: Mapping File Explanation
#72
FranticTyping
closed
2 years ago
0
Path issue leading to merging sample logs
#70
BustedSec
closed
2 years ago
1
Documentation or guidance on expanding Chainsaw's functionality
#69
tomnewman86
opened
2 years ago
15
Add Sigma Rule Id and description to results
#68
jvmendezp
closed
2 years ago
2
How to install on Windows 10
#67
bmmojo
closed
2 years ago
5
warning: field is never read
#66
etaylor77
closed
2 years ago
1
clean: updating README file
#65
FranticTyping
closed
2 years ago
1
feat: add in output command as requested for #60
#64
fscc-alexkornitzer
closed
2 years ago
0
Feature Request - Parsing event log xml file
#63
dfirhoze
closed
2 years ago
2
Previous
Next