Alternatives and similar repositories for EventLog-Analyzer

Users that are interested in EventLog-Analyzer are comparing it to the libraries listed below

• piesecurity / WindowsEventsToCSVTimeline
  Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.
  ☆32Updated 7 years ago
• kacos2000 / OtherStuff
  Various Topics
  ☆16Updated 8 months ago
• EricZimmerman / RegistryExplorerBookmarks
  Registry Explorer bookmark definitions
  ☆44Updated last year
• nesfit / NetfoxDetective
  Network Forensic Extendable Analysis Tool
  ☆39Updated 3 years ago
• EricZimmerman / RegistryPlugins
  ☆71Updated 4 months ago
• kacos2000 / Win10LiveInfo
  Windows 10 Live Information viewer
  ☆37Updated 3 years ago
• kacos2000 / Jumplist-Browser
  Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser
  ☆39Updated last year
• woanware / JumpLister
  ☆18Updated 12 years ago
• SamuelArnold / StarKill3r
  A security repo
  ☆27Updated 8 years ago
• SteveUnderScoreN / WindowsFirewall
  PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce …
  ☆63Updated 4 years ago
• AndrewRathbun / VanillaWindowsRegistryHives
  A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…
  ☆50Updated 2 months ago
• kacos2000 / WindowsTimeline
  Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)
  ☆194Updated 2 years ago
• EricZimmerman / JLECmd
  Automatic and Custom Destinations jump list parser with Windows 10 support
  ☆113Updated 3 months ago
• TrullJ / sticky-keys-scanner
  A PowerShell function that scans for the existence of a Sticky Keys backdoor.
  ☆24Updated 8 years ago
• kacos2000 / Win10
  Win 10/11 related research
  ☆196Updated 2 years ago
• trustedsec / tscopy
  ☆95Updated 3 months ago
• libyal / esedb-kb
  Extensible Storage Engine (ESE) Database File Knowledge Base
  ☆45Updated 2 weeks ago
• EricZimmerman / Lnk
  Lnk file parser
  ☆90Updated 7 months ago
• EricZimmerman / iisGeolocate
  geolocate ip addresses in IIS logs
  ☆20Updated last year
• jschicht / MftRcrd
  Command line $MFT record decoder
  ☆12Updated 8 years ago
• nasbench / procmon-malware-analysis-filters
  Repository containing malware analysis filters for the Windows SysInternals' - Process Monitor tool
  ☆20Updated 5 years ago
• EricZimmerman / GuidMapping
  ☆21Updated 11 months ago
• nsacyber / HTTP-Connectivity-Tester
  Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber
  ☆113Updated 4 years ago
• Invoke-IR / WmiEvent
  A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
  ☆55Updated 9 years ago
• Sup3rlativ3 / Deploy-LAPS
  This script and accompanying files will allow system administrators to automatically deploy Microsoft Local Administrator Password Soluti…
  ☆12Updated 8 years ago
• nsacyber / PRUNE
  Logs key Windows process performance metrics. #nsacyber
  ☆68Updated 3 years ago
• TonyPhipps / Powershell
  Tony's collection of powershell scripts, typically geared toward cybersec
  ☆34Updated last week
• metablaster / WindowsFirewallRuleset
  PowerShell scripts to automatically create rules for Windows firewall
  ☆174Updated last year
• woanware / wmi-parser
  Parses the WMI object database....looking for persistence
  ☆34Updated 6 years ago
• danielbohannon / DevSec-Defense
  Accompanying PowerShell Modules for DevSec Defense Presentation
  ☆30Updated 7 years ago