Post #1338 2.43K Nov 19, 2024, 23:08 UTC Chainsaw 是一个强大的 Windows 取证工具,帮助安全专家迅速识别 Windows 取证工件中的威胁,如事件日志和 MFT 文件。https://github.com/WithSecureLabs/chainsaw#start-of-content GitHub GitHub - WithSecureLabs/chainsaw: Rapidly Search and Hunt through Windows Forensic Artefacts Rapidly Search and Hunt through Windows Forensic Artefacts - WithSecureLabs/chainsaw