A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
GNU General Public License v3.0
109
stars
14
forks
source link
wip - add guid, initial section parsing #1
Closed
jklepsercyber closed 2 years ago
wip - add guid, initial section parsing