Command List

Analysis Commands:

• aws-ct-metrics: Generates metrics from AWS CloudTrail logs

Summary Commands:

• aws-ct-summary: Generates a summary of activity from user ARNs

DFIR Timeline Commands:

• aws-ct-timeline: Creates an AWS CloudTrail DFIR timeline
• azure-timeline: Creates an Azure DFIR timeline
• gws-timeline: Creates a Google Workspace DFIR timeline

Search Commands:

• aws-ct-search: Search AWS CloudTrail logs

Update Commands:

• update-rules: Updates the Sigma detection rules

General Commands:

• help: Print the help menu for commands