Beagle - An Incident Reply In Addition To Digital Forensics Tool Which Transforms Safety Logs In Addition To Information Into Graphs
Beagle is an incident response in addition to digital forensics tool which transforms information sources in addition to logs into graphs. Supported information sources include FireEye HX Triages, Windows EVTX files, SysMon logs in addition to Raw Windows retention images. The resulting Graphs tin john endure sent to graph databases such equally Neo4J or DGraph, or they tin john endure kept locally equally Python NetworkX objects. Beagle tin john endure used straight equally a python library, or through a provided spider web interface. The library tin john endure used either equally a sequence of functional calls. >>> from beagle.datasources import SysmonEVTX >>> graph = SysmonEVTX("malicious.evtx").to_graph() >>> graph <networkx.classes.multidigraph.MultiDiGraph at 0x12700ee10> Or past times strictly calling each intermediate pace of the information source to graph process. >>> from beagle.backends import NetworkX...