Incident responders and blue teams have a new tool called Chainsaw that speeds up searching through Windows event log records to identify threats. The tool is designed to assist in the first-response ...
Every once in a while, I run across a little-known but very useful tool. Microsoft Log Parser falls squarely into this category. Originally developed to extract information from IIS logs, it has ...