Epagneul - Graph Visualization For Windows Event Logs

Epagneul is a tool to visualize and investigate windows event logs.

Deployment

Requires docker and docker-compose to be installed.

Installing

make

Offline deployment

On a machine connected to internet, build an offline release:

make release

This will create a release folder containing ready to go docker images. Copy the project to your air gapped machine then run:

make load
make

This will install:

• epagneul web UI (port 8080)
• epagneul backend (port 8000)
• neo4j (port 7474)

todos

• Better SID corelations
• add …

blueteam dfir automation event event logs evtx forensics tools logs security tools visualization windows windows event logs