Chainsaw

A fast forensic triage tool for detecting suspicious Windows event log activity using rule based threat hunting