williballenthin/process-forest
Reconstruct process trees from event logs
Pure Python parser for classic Windows Event Log files (.evt)
This repository is cataloged as part of our automated global GitHub synchronization. Full telemetry, velocity snapshots, and code summaries are scheduled for continuous enrichment.
Reconstruct process trees from event logs
Open source Python library for NTFS analysis
no longer maintained
no longer maintained