Investigate malicious Windows logon by visualizing and analyzing Windows event log

AD Security Intrusion Detection System

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

Pure Python parser for Windows Event Log files (.evtx)

a C logging library built for performance and features

Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber

Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.

Extracting OSINT Insights from 15TB of GitHub Event Logs

Capture and log events, metrics and traces on your site. Make WordPress observable - finally!

1C:Enterprise 8 - Event log loader

CLI tool for automated discovery of BPS models from event logs

Power Event Provider service for Windows

A small event logging tool for Android.

Process Query Language (PQL) is a special-purpose programming language for managing process models based on information about process instances that these models describe. PQL is based upon temporal logic and adopts the concrete syntax of SQL.

Heuristics Miner in R and integrated with the bupaR framework.

Konrads' Pen-Ultimate (Windows) Log File Parser

Collection of Custom Views for the Microsoft Windows Event Viewer

Powershell scripts

A CLI tool for extracting event logs out of MIMIC Databases.

Sigma signatures matcher written in Python