A simple System monitor(Sysmon) EVTX inspector; search, visualize, and track Sysmon events
-
Updated
Jun 11, 2024 - Go
#
evtx-analysis
Here are 9 public repositories matching this topic...
This is a PySimpleGUI-based Python software tool for processing and visualising selected Windows Event Security.evtx log files that meet a condition in Event ID 4688.
-
Updated
Jun 15, 2024 - Python
Advanced PowerShell DFIR module for forensic analysis, threat hunting, and cmdline investigation in Windows.
windows security powershell incident-response forensics dfir cybersecurity threat-hunting digital-forensics virustotal forensic-analysis malware-detection evtx-analysis
-
Updated
Jan 12, 2026 - PowerShell
A python 3 script to extract and re-create Powershell script block from windows event logs(evtx).
-
Updated
Aug 18, 2022 - Python
Windows 安全排查轻量工具，集成 Sysmon 管理、事件监控、攻击链分析与取证快照
-
Updated
May 30, 2026 - TypeScript
Covert folder containing windows event logs (*.evtx) to sorted timeline csv files for easy processing and analysis.
-
Updated
Nov 9, 2025 - PowerShell
Lightweight Python engine for parsing Windows EVTX logs and detecting suspicious process creation (ID 1) and PowerShell activity (ID 4104).
-
Updated
Sep 25, 2026 - Python
Windows Persistence & Lateral Movement Detection, Log Analysis Challenge
-
Updated
Jun 16, 2026
AI-assisted SOC analysis pipeline with deterministic guardrails, evidence-first reporting, and multi-source security log ingestion.
cybersecurity security-analysis open-ai mitre-attack ai-security threat-detection gcp-security evtx-analysis llm-security gemini-ai soc-automation cloudtrail-security
-
Updated
Apr 26, 2026 - Python
Add this topic to your repo
To associate your repository with the evtx-analysis topic, visit your repo's landing page and select "manage topics."