Not sure why this was in my recommended, but it was actually quite interesting. Thank's for showcasing this, subbed!
@castle2282 жыл бұрын
Going to have to add this tool to the repertoire
@mallikab87072 жыл бұрын
Awesome 👌 Thank for your time and I will explore more on this.
@rogerioabreu30812 жыл бұрын
awesome. thnx
@lonegunmen1985 Жыл бұрын
Awsome! Thanks for sharing the knowlege
@NetworkITguy2 жыл бұрын
This with velociraptor is gg
@sulthansk64442 жыл бұрын
@Lordyzagat velociraptor ir tool
@orlandop4sun11 ай бұрын
Great job on this video.. súper profesional
@adrianguerrero95832 жыл бұрын
can you also do a preview/walkthrough for the Hayabusa tool by Yamato-Security. it looks like they are almost the same.
@shadisukkarАй бұрын
Hello 13Cubed. Thank you for this amazing video. I have a couple of questions regarding Chainsaw. Does Chainsaw work with Windows logs only, or does it work with other OS logs? Also, can it take (.json) logs or plain text logs (.log) as an input? Or is it specific for .evtx logs only?
@13CubedАй бұрын
It's a cross-platform tool, but it's designed for Windows forensic artifacts. And yes, Chainsaw v2 introduces "support for loading and parsing Event Logs in both JSON and XML format."
@shadisukkarАй бұрын
@@13Cubed Thank you.
@samjohn10982 жыл бұрын
Pretty cool.. Nice
@benw4529 Жыл бұрын
What happen to the syntax the commands to not work
@amirhosseinhemmati92902 ай бұрын
can you please provide a link to log database that you used
@13Cubed2 ай бұрын
Hi, unfortunately that test database has been long since removed.
@otvs58382 жыл бұрын
Please share the Latest and safest source link to download chainsaw .
@13Cubed2 жыл бұрын
github.com/WithSecureLabs/chainsaw/releases
@artember12002 жыл бұрын
does this require sysmon to be effective?
@13Cubed2 жыл бұрын
No, but Sysmon is certainly highly beneficial.
@Revoc Жыл бұрын
This seems to be out of date now with their update.
@13Cubed Жыл бұрын
Such is life with KZbin... will consider making an update at some point.
@ishannair13357 ай бұрын
none of these commands work for me. amazing
@13Cubed7 ай бұрын
What error do you receive when you try? I need a little more detail if you want to solve the issue.