SOFELK
SOF-ELK related files of interest
- 35 paths from 13 artifacts
- Per-user data
- Version 1.1
- Tony Knutson and Andrew Rathbun
Paths on disk
35 paths from 13 targets
Includes 5 targets
Each one is collected with this target
- EventLogs3 paths
- EvidenceOfExecution
- FileSystem
- LNKFilesAndJumpLists8 paths
- Prefetch2 paths
Notes
Use with SOFELK_Parser.mkape
References
2 links