drop security evtx csv · analyze authentication failure patterns · detect low-and-slow password spray · high-speed brute force · credential stuffing patterns · flag attacker ips · runs locally
security evtx csv
drop evtx csv
or click
4624 · 4625 — evtxecmd / chainsaw security export
drop security evtx csv (4624, 4625)