Logo
Windows EVTX Samples [200 EVTX examples]

Windows EVTX Samples [200 EVTX examples]

#Threat Defense#Threat Management

Open-source initiative providing malicious and benign datasets to expedite data analysis and threat research.

Visit Website

This container provides 200 Windows events for testing and training

This container includes 200 samples of Windows events that are associated with specific attack and post-exploitation techniques. These samples are valuable for testing detection scripts, training in Digital Forensics and Incident Response (DFIR) and threat hunting, as well as for designing detection use cases utilizing Windows and Sysmon event logs.

It includes a PowerShell script for EVTX file processing

It includes a PowerShell script designed for parsing and replaying EVTX files using Winlogbeat.