Blauhaunt
A collection of detections for Panther SIEM with detailed setup instructions.
Blauhaunt: A Collection of Tools for Logon Event Analysis
Blauhaunt is a collection of tools designed for filtering and visualizing logon events. It aims to help users address the 'Cotton Eye Joe' question: 'Where did you come from, where did you go?' This tool is particularly useful in the context of Security Incidents and Threat Hunts.
It offers an interactive user interface
It offers an interactive user graph, a heatmap displaying user activities, and a timeline. This tool is specifically designed for experienced DFIR specialists.
The Tool is User-Friendly and Efficient
The tool is user-friendly and requires no backend setup. You can easily run it locally by cloning the repository and starting a simple HTTP server.
Blauhaunt seamlessly integrates with a variety of tools and services, such as PowerShell Script, Velociraptor Artifact, and Defender 365 KUSTO Query. This makes it an essential resource for both threat hunting and incident response.
