/defender-detectionhistory-parser

A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.

Primary LanguagePythonGNU General Public License v3.0GPL-3.0