An Open Source Threat Hunting tool. at the moment following implementationo is done.
. probe hardware related information - cpu details, disk information, network interfaces, memory details; etc
. probe windows related information. OS details, User accounts, User directories; etc
. probe windows file system - user data directories, temp directory, app data, program files, system32, desktop directory; etc
. probe windows events - get most of the important information about windows events.
. probe windows registry - installed application, Run applications; etc
Future - TODO
. increase the capability into a endpoint security management tool.
. a full fledged threat hunting capability.
. contact vlabs.c [] gmail.com