The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.
☆58Apr 22, 2025Updated last year
Alternatives and similar repositories for Eventlog_Compendium
Users that are interested in Eventlog_Compendium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…☆15Jun 21, 2024Updated 2 years ago
- A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…☆12May 6, 2026Updated 5 months ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆60Updated this week
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆229Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Capture. Detonate. Collect☆14Sep 20, 2024Updated 2 years ago
- ETWhat is a Windows utility that determines whether Event Tracing for Windows (ETW) providers operate in kernel mode or user mode.☆10Jun 9, 2025Updated last year
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security f…☆13Updated this week
- Windows Event Log Knowledge Base☆36Sep 27, 2026Updated last month
- ☆14Jun 15, 2026Updated 4 months ago
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- An opensource sigma conversion tool built using pysigma☆177Oct 19, 2026Updated last week
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 6 months ago
- Your Browser-based EVTX Companion☆123Jul 21, 2026Updated 3 months ago
- ☆24Sep 7, 2026Updated last month
- A preconfigured Velociraptor triage collector☆79Oct 19, 2026Updated last week
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Event Tracing For Windows (ETW) Resources☆440Sep 25, 2026Updated last month
- ☆14Oct 21, 2026Updated last week
- Detection engineering template☆15Jul 24, 2025Updated last year
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆160Apr 1, 2026Updated 6 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Follow the trail of breadcrumbs left behind by any user on a computer or mounted disk image.☆31Aug 28, 2025Updated last year
- yara detection rules for hunting with the threathunting-keywords project☆171May 11, 2025Updated last year
- WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital s…☆126Oct 1, 2026Updated 3 weeks ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated 11 months ago
- LotL RMM☆410Updated this week
- ☆86Feb 4, 2026Updated 8 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆502Jun 16, 2026Updated 4 months ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 9 months ago
- ☆18Feb 2, 2026Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Updated this week
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆24Oct 9, 2024Updated 2 years ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆18Jul 6, 2026Updated 3 months ago
- A C# (.NET 6) tool to compare the file signature of files recursively and inform the user of matches and mismatches☆18Nov 29, 2024Updated last year
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆54Sep 13, 2026Updated last month