☆592Nov 12, 2026Updated this week
Alternatives and similar repositories for EventLogExpert
Users that are interested in EventLogExpert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parses USB connection artifacts from offline Registry hives☆109Updated this week
- ☆77Mar 30, 2026Updated 7 months ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆692Oct 26, 2026Updated 2 weeks ago
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆394Sep 8, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.☆1,641Updated this week
- A preconfigured Velociraptor triage collector☆81Updated this week
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 10 months ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the …☆4,845Updated this week
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆488Feb 16, 2026Updated 8 months ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆62Updated this week
- PowerShell for Active Directory, Defender XDR, Entra ID, Exchange Server, Microsoft 365, Windows, and more! ✌️☆257Oct 1, 2026Updated last month
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Documentation and scripts to properly enable Windows event logs.☆729Oct 3, 2025Updated last year
- ☆445Oct 22, 2026Updated 3 weeks ago
- Location of some Active Directory lab scripts I have created and find useful☆148Jun 23, 2026Updated 4 months ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆79Oct 22, 2026Updated 3 weeks ago
- Quick way to import starter configs into Intune☆151Updated this week
- Hunt Smarter, Hunt Harder☆201Mar 14, 2026Updated 7 months ago
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆477Feb 18, 2026Updated 8 months ago
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆762Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆276Nov 24, 2023Updated 2 years ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 9 months ago
- Open-source digital forensics (DFIR) toolkit with a desktop GUI: analyse E01, AFF4, raw/dd and VMDK disk images, recover deleted files by…☆238Oct 31, 2026Updated last week
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆247Sep 15, 2026Updated last month
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 10 months ago
- Active Directory delegation management tool☆536Oct 25, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,720Updated this week
- Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.☆422Oct 28, 2026Updated 2 weeks ago
- Harness the power of Splunk for your investigations☆173Oct 6, 2026Updated last month
- $MFT directory tree reconstruction & FILE record info☆335Oct 7, 2024Updated 2 years ago
- Render a simulated Active Directory Users and Computers tree from a Markdown unordered list in HTML☆40Dec 28, 2025Updated 10 months ago
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆162Jul 28, 2026Updated 3 months ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆492Oct 29, 2025Updated last year
Are these results useful?