| 2018-04-04 | Threat Hunting via Windows Event Logs | ourren | 1965 | |
| 2018-04-02 | Bitcoin and Cryptocurrency Tracking with the ELK Stack | ourren | 9282 | |
| 2018-03-31 | YARA Rules for Finding and Analyzing in InfoSec | ourren | 2226 | |
| 2018-03-29 | Exploring the opportunities and limitations of Threat Intelligence Platforms | ourren | 2533 | |
| 2018-03-27 | Signature Based Detection of User Events for PostMortem Forensic Analysis | tolive | 1855 | |
| 2018-03-25 | Attack Infrastructure Logging – Part 4: Log Event Alerting | ourren | 2337 | |
| 2018-03-25 | Attack Infrastructure Logging – Part 3: Graylog Dashboard 101 | ourren | 2882 | |
| 2018-03-25 | Attack Infrastructure Logging – Part 2: Log Aggregation | ourren | 2008 | |
| 2018-03-25 | Attack Infrastructure Logging – Part 1: Logging Server Setup | ourren | 1710 | |
| 2018-03-18 | Paper_for_Digital_Forensics: 数字取证相关的论文(摄像头特征) | ourren | 1297 | |
| 2018-03-16 | 渗透技巧—获得Windows系统的远程桌面连接历史记录 | ourren | 2664 | |
| 2018-03-16 | 网络犯罪调查与电子数据取证 | ourren | 2193 | |
| 2018-03-16 | Syslog类型Connector安装配置-ArcSight实战系列之四 | kelvin2294 | 3028 | |
