Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber
Appears on
Quick read
Latest capture 2026-10-18 09:38
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
1 observed capture since 2026-10-18. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Open Source EDR for Windows
Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
Practical Windows Forensics Training
An Active Defense and EDR software to empower Blue Teams
Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
