log wiping pattern and tool attribution detector — free browser tool | fatcousin

drop evtx mft or prefetch csv · detect known log wiping tools · timing signatures · automated vs manual · coordinated campaigns · runs locally

sources

drop evtx csv · mft csv · prefetch · shimcache

or click

Select file

Meterpreter clearev · Cobalt Strike reverse clear · wevtutil loop · Invoke-Phant0m · Empire EventLogBypass · 50+ signatures

drop evtx csv · mft csv · prefetch · shimcache csv

ready