ClaySecAI/WinLogs

One-command logging setup for malware analysis, detection engineering and DFIR labs: Windows audit policy, PowerShell script block logging, Sysmon, auditd and journald. Revertable, air-gap friendly, CI-tested.

语言：PowerShell · GitHub 星标：3 · Fork：0

话题：auditd · blue-team · detection-engineering · dfir · logging · malware-analysis · powershell · sysmon

在 GitHub 上查看原仓库