IRNotes

IR Notes is a cybersecurity tool designed to analyze Windows Event IDs related to security events and lateral movements within a network. Its primary use case is aiding security professionals in identifying and investigating suspicious activities through a structured log of significant event IDs. Notable features include categorization of logon events, scheduled task management, and detection of unauthorized service behaviors.