ELSA Parsers for the following Windows Process Tracking events:
Event ID 4688: A new process has been created
Specifically written for use with Security Onion. If used elsewhere, some modification will be needed.
forked from defensivedepth/Win-Process-Tracking_ELSA_Parsers
-
Notifications
You must be signed in to change notification settings - Fork 1
ELSA Parsers for Windows Process Tracking Events
License
dougburks/Win-Process-Tracking_ELSA_Parsers
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
ELSA Parsers for Windows Process Tracking Events
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published