🔬Forensics / DFIR

Event Log Parser

Parse Windows Event Log exports (JSON from PowerShell or XML from Event Viewer). Auto-maps Event IDs to MITRE ATT&CK tactics, highlights critical events (4688, 4104, 4625, 1102…), and lets you filter/export findings. This free forensics / dfir tool runs entirely in your browser — no data leaves your device, no account required, and it keeps working offline once the page has loaded.

evtxwindowsevent logevent idsecurity468841044625