windows-event-log

Cross-Platform, Agent-Native Universal Log Viewer.

An implementation of a Windows Event Collector server running on GNU/Linux.

WinLogAgent - A user-friendly, modern, and readily deployable Windows log collection client that makes it easy to forward collected logs to a SOC or SIEM.

WinLog Insight, an offline Windows log analyzer, gathers system, security and application logs. Its 90 built-in rules spot brute force, abnormal privilege escalation and other threats. It provides visual risk panels, real-time alerts and one-click PDF/Excel audit reports, storing all logs locally.

Viewer for Windows Event Log

Setting up a Windows Event Collector

An open-source log collector for collecting logs from Windows Event Forwarding

PowerShell Module for using Microsoft Windows Event Viewer Custom Views for Event Log Filtering in PowerShell

Convert Windows Event Log .evtx files to other formats.

Capture all events across all logs produced during the running of a particular exploit/script. Search and filter events

Windows Event Log API binding from winevt.h. https://docs.microsoft.com/en-us/windows/desktop/api/_wes/

A Python script that parses CPER-formatted raw data contained in error event log provided by WHEA-Logger

Search Windows event log and output results to a text file

EVTX forensic library suite — carve records from corrupt files, detect tampering indicators, analyze ETW sessions. No runtime deps.

Python 3-based multithreaded Windows Event monitoring program

Setup-Guide for the central Logserver Graylog (dockerized)

A C# tool that analyzes the 4624 and 4625 login entries in the Windows Security Event Log. A tool that quickly extracts the remote IP, username, and time information.

Windows EventLog Parse

Event Tracing for Windows

🛡️ Real-time Windows endpoint security monitor with stealth mode — detects brute force attacks, malware, suspicious processes, file tampering, software installs & sends instant alerts to your phone via Email/Telegram