☆541Jul 24, 2026Updated this week
Alternatives and similar repositories for EventLogExpert
Users that are interested in EventLogExpert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parses USB connection artifacts from offline Registry hives☆109Feb 8, 2026Updated 5 months ago
- ☆75Mar 30, 2026Updated 3 months ago
- USN Journal full path builder☆69Apr 16, 2026Updated 3 months ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆666Jul 6, 2026Updated 2 weeks ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆296Jun 6, 2026Updated last month
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.☆1,583Jul 3, 2026Updated 3 weeks ago
- A preconfigured Velociraptor triage collector☆77Jun 29, 2026Updated 3 weeks ago
- Kiota serialization provider implementation with System.Text.Json☆24Jul 9, 2024Updated 2 years ago
- Forensic cheatsheets for use with cheat☆15Dec 2, 2021Updated 4 years ago
- Hunt Smarter, Hunt Harder☆199Mar 14, 2026Updated 4 months ago
- Location of some Active Directory lab scripts I have created and find useful☆142Jun 23, 2026Updated last month
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆440Feb 16, 2026Updated 5 months ago
- Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the …☆4,497Updated this week
- Quick way to import starter configs into Intune☆144Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆70Jul 16, 2026Updated last week
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 3 years ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆54Updated this week
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆157Apr 1, 2026Updated 3 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆130Dec 28, 2025Updated 6 months ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆43Feb 9, 2026Updated 5 months ago
- ☆427Jul 16, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV outp…☆331Feb 26, 2026Updated 5 months ago
- Public repository of Sigma and YARA rules created by Synacktiv☆20Oct 15, 2025Updated 9 months ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Active Directory Vulnerability Scanner☆461Mar 3, 2026Updated 4 months ago
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- $MFT directory tree reconstruction & FILE record info☆330Oct 7, 2024Updated last year
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆266Nov 24, 2023Updated 2 years ago
- Documentation and scripts to properly enable Windows event logs.☆711Oct 3, 2025Updated 9 months ago
- Render a simulated Active Directory Users and Computers tree from a Markdown unordered list in HTML☆40Dec 28, 2025Updated 6 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Active Directory delegation management tool☆524Oct 25, 2025Updated 9 months ago
- ☆18Mar 10, 2026Updated 4 months ago
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 6 months ago
- PowerShell for Active Directory, Defender XDR, Entra ID, Exchange Server, Microsoft 365, Windows, and more! ✌️☆99Apr 29, 2026Updated 2 months ago
- PowerShell toolkit for deploying Microsoft 365 Apps, Visio, Project, language packs, and proofing tools via Intune Win32 apps.☆19Apr 30, 2026Updated 2 months ago
- ☆49Jun 19, 2026Updated last month
- A repository to share publicly available Velociraptor detection content☆205Jul 19, 2026Updated last week