Analýza Windows logů za účelem odhalení chování škodlivých PowerShell skriptů

Abstract

This diploma thesis is about the analysis and evaluation of the possibilities of the PowerShell program. The aim of the thesis is to get acquainted with and test the possibilities of its logging, which this tool offers. Part of the work is the creation of its own application for automated processing of Windows and PowerShell logs, which are important for the investigation of security incidents. Last but not least, the implementation of a server for visualization of Windows logs using Splunk.