{"repo":"ceramicskate0/SWELF","free":true,"listed":false,"github":"https://github.com/ceramicskate0/SWELF","clone":"git clone https://github.com/ceramicskate0/SWELF.git","description":"Simple Windows Event Log Forwarder (SWELF). Its easy to use/simply works Log Forwarder and EVTX Parser. Almost in full release here at https://github.com/ceramicskate0/SWELF/releases/latest.","language":"C#","stars":25,"topics":["windows","eventlog","forwarder","logging","dotnet","logs","defense","logging-agent","log-forwarder","hunting"],"license":"AGPL-3.0","category":"analytics","readme_excerpt":"Like the work dont forget to hit that Star Button and Sponsor Simple-Windows-Event-Log-Forwarder (SWELF) Shameless plug to allow Support: https://patreon.com/ceramicskate0 Get Latest Release Summary: If you can type this, Findthis With this EventLog Name(Not required) EventID(Not required) into a text file (Searchs.txt)) you can find the logs you want from a windows machine and send just those to your SIEM. Why SWELF and how is it diffrent from anything out there? Well, are you having the to many log issue? Or maybe just cant find what you want from a log forwarder? Want to quickly get the logs you want from local evtx files or eventlog service and then get them in the order they where made? Maybe the other log forwarders are just too complicated and you want something simple that can do it all? SWELF might be able to help you. You tell SWELF the the key words and/or Event Log Name and/or the event ID and it will find it for you. You can event tell it things like the minimum number of characters in log, or the maximum length of the command-line arguments, or the length of the log itself, then the SWELF app will send just that log to your Log Collection location from a windows machine in a variety of formats. SWELF is designed to be as small,lightweight, and windows native as possible with very low requirements and setup and still be a powerful and useful tool. SWELF is designed to put you back in control of your log data and your log forwarder as much as possible. Also, an in","default_branch":null,"files":null,"tree":[],"storefront":"/r/ceramicskate0","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ceramicskate0/SWELF/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}