APT-Hunter VS evtx-hunter

Compare APT-Hunter vs evtx-hunter and see what are their differences.

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity (by ahmedkhlief)

evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files. (by NVISOsecurity)
Our great sponsors
  • SonarQube - Static code analysis for 29 languages.
  • talent.io - Download talent.io’s Tech Salary Report
  • Scout APM - Less time debugging, more time building
APT-Hunter evtx-hunter
2 2
780 109
- 0.9%
5.0 1.0
30 days ago 10 months ago
Python Python
GNU General Public License v3.0 only GNU General Public License v3.0 only
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

APT-Hunter

Posts with mentions or reviews of APT-Hunter. We have used some of these posts to build our list of alternatives and similar projects.

We haven't tracked posts mentioning APT-Hunter yet.
Tracking mentions began in Dec 2020.

evtx-hunter

Posts with mentions or reviews of evtx-hunter. We have used some of these posts to build our list of alternatives and similar projects.

We haven't tracked posts mentioning evtx-hunter yet.
Tracking mentions began in Dec 2020.

What are some alternatives?

When comparing APT-Hunter and evtx-hunter you can also consider the following projects:

beagle - Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Watcher - Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

IntelOwl - Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Microsoft-eventlog-mindmap - Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.

hashlookup-forensic-analyser - Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/

EVTX-to-MITRE-Attack - Set of EVTX samples (>170) mapped to MITRE [email protected] tactic and techniques to measure your SIEM coverage or developed new use cases.

mediator - An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.