Commits

Branch selector

 master

User selector

catarinadf

Datepicker

All time

Commit History

Commits on Nov 12, 2023

• refactor: improve the code that handles unknown AppId and UserId values (no entry in SruDbIdMapTable)

  

  catarinadf

  authored and

  alexkornitzer

  committed
  3968f08

  Copy full SHA for 3968f08

• fix: handle unknown AppId and UserId values (no entry in SruDbIdMapTable)

  

  catarinadf

  authored and

  alexkornitzer

  committed
  f16028c

  Copy full SHA for f16028c

Commits on Oct 9, 2023

• docs: move the forensic insights about SRUM to the wiki

  catarinadf

  committed
  bbce68d

  Copy full SHA for bbce68d

Commits on Oct 7, 2023

• docs: update the command line options of the SRUM database parser, add DFIRArtifactMuseum to the Acknowledgements section, fix typo

  

  catarinadf

  authored and

  alexkornitzer

  committed
  55dd0cd

  Copy full SHA for 55dd0cd

• test: validate the output of the SRUM database parser

  

  catarinadf

  authored and

  alexkornitzer

  committed
  f67c01d

  Copy full SHA for f67c01d

• feat: add the stats-only and quiet options to the SRUM database parser

  

  catarinadf

  authored and

  alexkornitzer

  committed
  edaec4a

  Copy full SHA for edaec4a

• refactor: return the structure SrumDbInfo and use BTreeMap instead of HashMap to get ordered values

  

  catarinadf

  authored and

  alexkornitzer

  committed
  35de9fc

  Copy full SHA for 35de9fc

• refactor: lowercase the first letter of the error message

  

  catarinadf

  authored and

  alexkornitzer

  committed
  04af6aa

  Copy full SHA for 04af6aa

• feat: dump the raw content of ESE databases and analyse SRUM databases

  

  catarinadf

  authored and

  alexkornitzer

  committed
  8acca7c

  Copy full SHA for 8acca7c

Commits on Jul 25, 2023

• feat(rules): Add rules to track RDP sessions

  

  catarinadf

  authored and

  alexkornitzer

  committed
  f0a8685

  Copy full SHA for f0a8685

• feat(rules): Add rule to detect the execution of PowerShell scripts using script block auditing

  

  catarinadf

  authored and

  alexkornitzer

  committed
  7c2542f

  Copy full SHA for 7c2542f

• feat(rules): Add rules for Microsoft RDS (RD Gateway, RD Connection Broker, RD Web Access, UPD)

  

  catarinadf

  authored and

  alexkornitzer

  committed
  191bcf2

  Copy full SHA for 191bcf2

• feat(rules): Add rules for AppLocker

  

  catarinadf

  authored and

  alexkornitzer

  committed
  81e81ad

  Copy full SHA for 81e81ad