☆581Oct 2, 2026Updated this week
Alternatives and similar repositories for EventLogExpert
Users that are interested in EventLogExpert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parses USB connection artifacts from offline Registry hives☆110Feb 8, 2026Updated 7 months ago
- ☆77Mar 30, 2026Updated 6 months ago
- USN Journal full path builder☆71Apr 16, 2026Updated 5 months ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆679Jul 6, 2026Updated 2 months ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆372Sep 8, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A preconfigured Velociraptor triage collector☆78Updated this week
- A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.☆1,619Updated this week
- Kiota serialization provider implementation with System.Text.Json☆24Jul 9, 2024Updated 2 years ago
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Hunt Smarter, Hunt Harder☆199Mar 14, 2026Updated 6 months ago
- Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the …☆4,763Updated this week
- Quick way to import starter configs into Intune☆149Jul 28, 2026Updated 2 months ago
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆77Aug 31, 2026Updated last month
- Location of some Active Directory lab scripts I have created and find useful☆146Jun 23, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆482Feb 16, 2026Updated 7 months ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 6 months ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 7 months ago
- ☆442Sep 20, 2026Updated last week
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆59Sep 6, 2026Updated 3 weeks ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆131Dec 28, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- $MFT directory tree reconstruction & FILE record info☆331Oct 7, 2024Updated last year
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆273Nov 24, 2023Updated 2 years ago
- Documentation and scripts to properly enable Windows event logs.☆723Oct 3, 2025Updated 11 months ago
- Active Directory Vulnerability Scanner☆482Mar 3, 2026Updated 7 months ago
- Render a simulated Active Directory Users and Computers tree from a Markdown unordered list in HTML☆40Dec 28, 2025Updated 9 months ago
- PowerShell for Active Directory, Defender XDR, Entra ID, Exchange Server, Microsoft 365, Windows, and more! ✌️☆255Updated this week
- ☆18Sep 25, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 8 months ago
- PowerShell toolkit for deploying Microsoft 365 Apps, Visio, Project, language packs, and proofing tools via Intune Win32 apps.☆19Sep 11, 2026Updated 3 weeks ago
- Active Directory delegation management tool☆531Oct 25, 2025Updated 11 months ago
- Public repository of Sigma and YARA rules created by Synacktiv☆21Oct 15, 2025Updated 11 months ago
- ☆55Aug 26, 2026Updated last month
- A repository to share publicly available Velociraptor detection content☆207Updated this week
- The cActiveDirectorySecurity module contains PowerShell Functions which are designed to report on and manipulate Access Control Lists on …☆11Aug 31, 2018Updated 8 years ago