0xMohammed
File Format
forensicswiki
Windows Event Logs IDs
ultimatewindowssecurity
Analysis Tools
Automation (Sigma & Yara rules)
DeepBlueCLI
ChainSaw
Zircolite
APT-Hunter
Manual analysis
EvtxECmd
\
Event Log Explorer