Skip to content
#

powershell-forensics

Star

Here is 1 public repository matching this topic...

Mihir-Choudhary / EventHawk

Star 49

Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mode (Arrow/DuckDB) for 10M+ events.

log-analysis dfir digital-forensics session-reconstruction forensic-analysis security-tools timeline-analysis blue-team evtx windows-event-logs windows-forensics blue-team-tool evtx-analysis dfir-tools event-log-analysis incident-response-tool evtx-parser event-log-parser powershell-forensics
  • Updated May 20, 2026
  • Python

Improve this page

Add a description, image, and links to the powershell-forensics topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the powershell-forensics topic, visit your repo's landing page and select "manage topics."

Learn more