GitHub repository: 0xHasanM/LogonSessionAuditor
Primary language: Python
Description: This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you select the EVTX file and specify a time for correlating login and logout events.