ADFT

https://github.com/Kjean13/ADFT

Open Source

Categories

Forensics Post-Exploitation

Description

Active Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)

Keywords

active-directory blue-team dfir evtx forensics incident-response python siem threat-hunting windows-security

Screenshots

Example Usage

./install_adft.sh

For authorized security testing and educational use only.