Open-source alternatives to Python Evt

Windows Live Artifacts Acquisition Script

Python script to parse the NTFS USN Journal

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

Open source Python library for NTFS analysis

Hayabusa is a Windows event log analyzer, threat hunting tool, and forensic timeline generator. It functions as a detection engine that applies threat patterns to logs to identify suspicious behavior and security threats. The project distinguishes itself through the ability to synchronize detection rules from remote repositories and tune risk levels to prioritize critical alerts. It also provides specialized forensic capabilities, such as extracting event log data into chronological records for incident response investigations. The tool's broader capabilities include security log enrichment

A modern Python-3-based alternative to RegRipper

A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts