Skip to content
View shu-tom's full-sized avatar

Sponsoring

@mrexodia

Organizations

@JPCERTCC

Block or report shu-tom

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Python 3,156 486 Updated Oct 19, 2025

Document ETW providers

C 281 56 Updated Mar 28, 2020

ETW forensic tool for Volatility3 plugin

Python 17 Updated Nov 15, 2024

Volatility plugin for extracts configuration data of known malware

Python 494 69 Updated Dec 22, 2023