chainsaw

Auth/lab ref: Fast DFIR triage for Windows forensic artifacts (EVTX, MFT, registry, ESE/SRUM) with Sigma and built-in detection logic.

Independent GitHub snapshot · Automated classification · Original documentation governs