☆585Oct 20, 2026Updated this week
Alternatives and similar repositories for EventLogExpert
Users that are interested in EventLogExpert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parses USB connection artifacts from offline Registry hives☆108Feb 8, 2026Updated 8 months ago
- ☆77Mar 30, 2026Updated 6 months ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆121Updated this week
- USN Journal full path builder☆70Apr 16, 2026Updated 6 months ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆679Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆380Sep 8, 2026Updated last month
- PowerShell for Active Directory, Defender XDR, Entra ID, Exchange Server, Microsoft 365, Windows, and more! ✌️☆256Oct 1, 2026Updated 3 weeks ago
- A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.☆1,630Oct 3, 2026Updated 3 weeks ago
- A preconfigured Velociraptor triage collector☆79Updated this week
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 9 months ago
- Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the …☆4,806Updated this week
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆485Feb 16, 2026Updated 8 months ago
- ☆444Oct 15, 2026Updated last week
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆78Oct 8, 2026Updated 2 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Quick way to import starter configs into Intune☆150Oct 4, 2026Updated 2 weeks ago
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆275Nov 24, 2023Updated 2 years ago
- Location of some Active Directory lab scripts I have created and find useful☆148Jun 23, 2026Updated 4 months ago
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 2 months ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Documentation and scripts to properly enable Windows event logs.☆723Oct 3, 2025Updated last year
- Hunt Smarter, Hunt Harder☆200Mar 14, 2026Updated 7 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 6 months ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 8 months ago
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆474Feb 18, 2026Updated 8 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 9 months ago
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,695Oct 14, 2026Updated last week
- MS Word (DOCx) Parsing Tool☆25Updated this week
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,414Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆59Sep 6, 2026Updated last month
- $MFT directory tree reconstruction & FILE record info☆333Oct 7, 2024Updated 2 years ago
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆740Aug 31, 2026Updated last month
- Active Directory delegation management tool☆533Oct 25, 2025Updated 11 months ago
- Render a simulated Active Directory Users and Computers tree from a Markdown unordered list in HTML☆40Dec 28, 2025Updated 9 months ago
- Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.☆416Oct 14, 2026Updated last week
- Active Directory Vulnerability Scanner☆482Mar 3, 2026Updated 7 months ago