LogonTracer icon indicating copy to clipboard operation
LogonTracer copied to clipboard

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Results 22 LogonTracer issues
Sort by recently updated
recently updated
newest added

I already installed every python package needed. But, still getting the error - [!] changefinder must be installed for this script. I installed changefinder both manually and with the help...

help wanted

After logs are uploaded, the system cannot Search for logs. If you click the Search message, WARNING: Search failed! Is displayed. . Evtx XML has been uploaded successfully.

Followed the instructions for installation. Made changes to neo4j config but on executing python3 logontracer.py -r, i get the error "Can't connect Neo4j Database"

![image](https://user-images.githubusercontent.com/52519142/161280273-edc92fc4-a878-4988-97de-b778d664ade6.png) ![image](https://user-images.githubusercontent.com/52519142/161280339-851605b1-eb36-4afd-baa1-f32220e21a65.png) 2022-04-01 10:21:51,526 INFO supervisord started with pid 7 2022-04-01 10:21:52,528 INFO spawned: 'logontracer' with pid 111 2022-04-01 10:21:52,530 INFO spawned: 'neo4j' with pid 112 2022-04-01 10:21:54,060 INFO success:...

We are trying to get this process automated so this tool will always show yesterday's user activity. Is there a tested and proven method for retrieving event logs in XML....

add datasource from splunk?

enhancement

hi,when i import my event log ,i got these errors.but the sample Securyty.evtx is good,why? $ sudo python3 logontracer.py --delete -e ./security.evtx -z +8 -u neo4j -p passwrod -s 192.168.1.69...

Hi I'm uploading XML based EVTXs to LogonTracer. Python command based upload is extremely slow vs GUI. GUI runs faster than CLI - any ideas? All running on a local...

Hello I got the following issue when importing an evtx ``` Calculate PageRank. [*] Creating a graph data. Traceback (most recent call last): File "/opt/LogonTracer/logontracer.py", line 1096, in main() File...

Can we use LogonTracer to monitor logs in a company that generates 1 Gbt (300k event) evtx file per hour?