APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Incident ResponseObservabilityOpen Source

About

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity . APT-Hunter use pre-defined detection rules and focus on statistics to uncover abnormalities which is very effective in compromise assessment . the output produced with timeline that can be analyzed directly from Excel , Timeline Explorer , Timesketch , etc...

Open Source Health

Not enough history
Stars
1,418
Forks
246
License
GPL-3.0
Last commit
2 years ago
Python

Related Categories

Using APT-Hunter?

Track its cost next to the rest of your stack and get a reminder before it renews.

Add to my stack

Vendor

ahmedkhlief

Purple teamer who Hunt APT and build tools based on their techniques

View vendor profile