Richard Roy
@unresolvedhost
Detection Engineer
ID: 1048233433036517376
http://blogs.kynigoi.com 05-10-2018 15:28:20
3 Tweet
83 Followers
1,1K Following
As a lazy analyst, I often struggled to find Windows security event IDs & their fields during hunt sessions. So, I built a sleek lookup tool that lets you search instantly, filter by fields, and get ready-to-use Splunk & Elastic queries with just a click. unresolvedhost.github.io/windows-securi…