A suite of Tools to aid Incidence Response and Live Forensics for - Windows (Powershell) | Linux (Bash) | MacOS (Shell)

Triaging Windows event logs based on SANS Poster

Enterprise PowerShell & VBScript suite for Active Directory automation, ITSM-aligned provisioning, security hardening, and digital forensics - built for Windows Server and workstation environments by a Senior IAM Analyst with a focus on accuracy, scalability, and compliance.

Python Implementation of Decay Replay Mining (DREAM)

PowerShell module to query Windows Event Logs and write events with structured EventData or UserData

Bypass windows eventlogs & Sysmon

R Interface between bupaR and the PM4Py Process Mining library

An updated fork of @AbdulRhmanAlfaifi's EventLogMonitor, which hooks into Window Event Logs and displays the new events as they are written to disk.

Project structure and initial code for predictive process monitoring with PM4Py and PyTorch.

Decay Replay Mining to Predict Next Process Events

AzioEventLog Analyzer is a monitoring and analysis tool for Windows Event Logs with real-time tracking, database storage, advanced filtering capabilities, and interactive dashboard visualization.

simple windows event alert to telegram

Python tool that applies Sigma rules to Kaspersky EVTX logs.

Process Discovery with Differential Privacy

Windows Server Active Directory IT automation cybersecurity PowerShell VBScript enterprise IT infrastructure scripting system administration identity management secure environments automation tools open-source digital forensics.

The Forensic Examiners Swiss Army Knife.

Calculate Windows downtime

A JS code that will get you the events you query for from the block you choose to the latest block on EVMs

📅🔌🔐🔍 Simple PowerShell tool to tell you about latest logins, failures to login and power (shutdown, restart) events.

Console Windows event log viewer