Skip to content

Latest commit

 

History

History
9 lines (5 loc) · 419 Bytes

README.md

File metadata and controls

9 lines (5 loc) · 419 Bytes

Evtx-To-MalwLess

Evtx-To-Malwless is a PowerShell script that allows you to convert .evtx events to a MalwLess configuration file.

This allows other people to use intrustion detection logs to test their defenses without having to manually write the MalwLess configuration.

Usage

.\Evtx-To-MalwLess.ps1 -EventFile C:\path\to\events.evtx -OutputFile C:\path\to\output.json