Advanced Windows Event Log threat hunter in pure PowerShell — Sigma-subset detection, correlation engine, per-entity risk scoring, self-contained HTML reports. Zero dependencies, air-gap ready.
log-analysis powershell incident-response dfir threat-hunting digital-forensics sigma soc security-tools blue-team mitre-attack evtx threat-detection windows-event-logs windows-security detection-engineering event-log-analysis zavetsec
-
Updated
Jun 5, 2026 - PowerShell