JPCERTCC/LogonTracer

• highreadme#1

  Reposition the README's opening to emphasize specialized graph visualization

  原因：

  当前

  **LogonTracer v2** is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name (or an IP address) and account name found in logon-related events and displays it as a graph.

  复制粘贴的修复

  复制

  **LogonTracer v2** is a specialized tool for investigating malicious Windows logon attempts by visualizing and analyzing Active Directory event logs using a graph database. It uniquely associates hostnames and account names from logon events, displaying them as an interactive graph to quickly uncover suspicious activity, offering a focused alternative to general SIEM platforms.

  待办完成忽略
• mediumhomepage#2

  Add a homepage URL to the repository's 'About' section

  原因：

  复制粘贴的修复

  复制

  Add a relevant project page, documentation site, or dedicated section on JPCERT/CC's website to the repository's 'About' section.

  待办完成忽略
• mediumlicense#3

  Clarify the existing license in the README

  原因：

  复制粘贴的修复

  复制

  Add a section or line in the README (e.g., under 'License' heading) that explicitly states the terms and conditions of the existing LICENSE file, or clarifies which license(s) apply.

  待办完成忽略

本次扫描解析到的品类 GEO 通道：google/gemini-2.5-flash, deepseek/deepseek-v4-flash

• 品类问题

  How can I visualize and analyze Windows event logs to investigate malicious logon attempts?

  你：未被推荐
  AI 推荐顺序：

  1. Splunk Enterprise Security
  2. ELK Stack
  3. Microsoft Sentinel
  4. Graylog
  5. Event Log Explorer
  6. PowerShell

  AI 推荐了 6 个替代方案，却始终没点名 JPCERTCC/LogonTracer。这就是要补上的差距。

  查看 AI 完整回答
• 品类问题

  Tool for visualizing Active Directory logon events to detect suspicious security activity.

  你：未被推荐
  AI 推荐顺序：

  1. Splunk Enterprise Security (ES)
  2. Microsoft Sentinel
  3. Elastic Security
  4. Exabeam Security Operations Platform
  5. Rapid7 InsightIDR
  6. LogRhythm SIEM

  AI 推荐了 6 个替代方案，却始终没点名 JPCERTCC/LogonTracer。这就是要补上的差距。

  查看 AI 完整回答

• Metadata completeness

  warn

  建议：

• README presence

  pass

• Compared to common alternatives in this category, what is the core differentiator of JPCERTCC/LogonTracer?

  pass
  ✓AI 明确点名了 JPCERTCC/LogonTracer

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• If a team adopts JPCERTCC/LogonTracer in production, what risks or prerequisites should they evaluate first?

  pass
  ✓AI 明确点名了 JPCERTCC/LogonTracer

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• In one sentence, what problem does the repo JPCERTCC/LogonTracer solve, and who is the primary audience?

  pass
  ✓AI 明确点名了 JPCERTCC/LogonTracer

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？