| 2018-07-11 | 一款用于可视化分析恶意登录Windows系统的安全日志取证工具 | ourren | 3239 | |
| 2018-07-10 | Categorising and Enriching Security Events in an ELK with Sysmon and ATT&CK | ourren | 2080 | |
| 2018-07-06 | dftimewolf: A framework for orchestrating forensic | ourren | 5322 | |
| 2018-07-02 | AccessLogAnylast: 支持Nginx、Apache、Tomcat等标准WEB日志的分析 | ourren | 2845 | |
| 2018-07-02 | Log-killer: Clear all your logs in [linux/windows] servers | ourren | 2540 | |
| 2018-06-29 | Threat Hunting-威胁狩猎分享 | ourren | 3518 | |
| 2018-06-26 | 浅谈威胁情报从甲方运营到乙方交付 | ourren | 2260 | |
| 2018-06-19 | honeytrap: Advanced Honeypot framework | ourren | 2391 | |
| 2018-06-13 | How to accelerate Suricata, Bro, Snort with PF_RING FT | ourren | 2527 | |
| 2018-06-12 | 从EDR到威胁情报运营—浅谈终端化的情报部署 | ourren | 2771 | |
| 2018-06-06 | Tracing stolen bitcoin 如何追踪被盗比特币的一些讨论 | ourren | 1768 | |
| 2018-06-06 | ClickHouse与威胁日志分析 | ourren | 2584 | |
| 2018-06-05 | 使用 Rekall 和 WinPmem 进行内存取证 | ourren | 2986 | |
