EvotecIT/EventViewerX

Pure Python parser for Windows Event Log files (.evtx)

Rapidly Search and Hunt through Windows Forensic Artefacts

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

PowerShell Digital Forensics & Incident Response Scripts.

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity