☆563Aug 22, 2026Updated this week
Alternatives and similar repositories for EventLogExpert
Users that are interested in EventLogExpert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parses USB connection artifacts from offline Registry hives☆110Feb 8, 2026Updated 6 months ago
- ☆77Mar 30, 2026Updated 4 months ago
- USN Journal full path builder☆71Apr 16, 2026Updated 4 months ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆674Jul 6, 2026Updated last month
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆342Aug 16, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.☆1,606Aug 1, 2026Updated 3 weeks ago
- A preconfigured Velociraptor triage collector☆77Aug 10, 2026Updated last week
- Kiota serialization provider implementation with System.Text.Json☆24Jul 9, 2024Updated 2 years ago
- Forensic cheatsheets for use with cheat☆15Dec 2, 2021Updated 4 years ago
- Hunt Smarter, Hunt Harder☆200Mar 14, 2026Updated 5 months ago
- Location of some Active Directory lab scripts I have created and find useful☆142Jun 23, 2026Updated 2 months ago
- Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the …☆4,657Updated this week
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆482Feb 16, 2026Updated 6 months ago
- Quick way to import starter configs into Intune☆148Jul 28, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆72Jul 26, 2026Updated 3 weeks ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 3 years ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆56Aug 11, 2026Updated last week
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆158Apr 1, 2026Updated 4 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆131Dec 28, 2025Updated 7 months ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 6 months ago
- ☆440Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV outp…☆334Feb 26, 2026Updated 5 months ago
- Public repository of Sigma and YARA rules created by Synacktiv☆21Oct 15, 2025Updated 10 months ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Active Directory Vulnerability Scanner☆472Mar 3, 2026Updated 5 months ago
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- $MFT directory tree reconstruction & FILE record info☆332Oct 7, 2024Updated last year
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆268Nov 24, 2023Updated 2 years ago
- Documentation and scripts to properly enable Windows event logs.☆718Oct 3, 2025Updated 10 months ago
- Render a simulated Active Directory Users and Computers tree from a Markdown unordered list in HTML☆40Dec 28, 2025Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Active Directory delegation management tool☆529Oct 25, 2025Updated 9 months ago
- ☆18Mar 10, 2026Updated 5 months ago
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 7 months ago
- PowerShell for Active Directory, Defender XDR, Entra ID, Exchange Server, Microsoft 365, Windows, and more! ✌️☆99Apr 29, 2026Updated 3 months ago
- PowerShell toolkit for deploying Microsoft 365 Apps, Visio, Project, language packs, and proofing tools via Intune Win32 apps.☆19Apr 30, 2026Updated 3 months ago
- ☆50Updated this week
- A repository to share publicly available Velociraptor detection content☆206Updated this week