DFIR Scripts — Windows Forensic Reference Tools

Кратко

Self-contained DFIR reference pages covering 251 Windows registry artifacts, 399 Security Event IDs, 30 Sysmon events, ATT&CK mapping, and curated Sigma detection rules.