Merge pull request #900 from Qazeer/Mplog-Parser

Add Mplog-Parser to parse Windows Defender MPLog

Modules/Apps/GitHub/Mplog-Parser.mkape

@@ -0,0 +1,21 @@
+Description: 'Mplog-Parser: parses Microsoft Protection log files into CSV files'
+Category: Antivirus
+Author: Thomas DIOT (Qazeer)
+Version: 1.0
+Id: 6084c8ab-2059-41a4-89f4-dba2cfdb4bb4
+BinaryUrl: https://github.com/Qazeer/mplog_parser-compiled/releases/download/v1.0/mplog_parser.exe
+ExportFormat: csv
+Processors:
+    -
+        Executable: mplog_parser.exe
+        CommandLine: -d "%SourceDirectory%\ProgramData\Microsoft\Windows Defender\Support" -o "%destinationDirectory%"
+        ExportFormat: csv
+
+# Documentation
+# Mplog-Parser parses Microsoft Protection log files into a number of CSV files.
+# mplog_parser source: https://github.com/Intrinsec/mplog_parser
+# Compiled version: https://github.com/Qazeer/mplog_parser-compiled
+# Information on Windows Defender MPLog:
+# https://www.crowdstrike.com/blog/how-to-use-microsoft-protection-logging-for-forensic-investigations/
+# https://www.intrinsec.com/hunt-mplogs/
+# https://artefacts.help/windows_defender_support_logs.html