z0ne323 / WinUnderIR

0 stars 1 forks source link

WELCOME to WinUnderIR

This project is intended to be a toolkit for an Incident Responder or any type of blue team operator too!

As of this day (3/8/2023), you'll find:

VTScript

The First tool let you check for malicious activity by searching files hashes, URLs, domains and IPs thanks to VirusTotal HUGE databases!

You'll need to add your api key (from the VirusTotal API) in a file somewhere on your system, (best option will be to put it in VTScript folder) but it's as you want! You'll just need to do this simple thing to properly run the tool!

WinEventParser

The Second tool let you search for malicious activity through the Windows Event Log system !

(The only requirement is to have this repo and of course a windows machine to search for logs!)