🔔I published a new script to parse the log of #AppLocker🔒 , which I called Get-AppLockerEventlog.ps1
It compiles all the useful data needed in #threathunting and #DFIR
You can find the script and the documentation here:
👉github.com/RomaissaAdjail…
It compiles all the useful data needed in #threathunting and #DFIR
You can find the script and the documentation here:
👉github.com/RomaissaAdjail…
2/ Also, You can save the output as a CSV.
3/ It comes with 04 cases (block, all, allow, audit)
• • •
Missing some Tweet in this thread? You can try to
force a refresh
