evtx topic

Graph Visualization for windows event logs

jurelou

Pure Python parser for Windows Event Log files (.evtx)

williballenthin

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

mdecrevoisier

Windows Events Attack Samples

sbousseaden

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

wagga40

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

NVISOsecurity

Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.

mdecrevoisier

C# based evtx parser with lots of extras

EricZimmerman

Parse evtx files and detect use of the DanderSpritz eventlogedit module

fox-it

A library for fast parse & import of Windows Eventlogs into Elasticsearch.

sumeshi