Rapidly Search and Hunt through Windows Forensic Artefacts
active 2024-05-05 → 2026-08-07 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 825 days from 2024-05-05 to 2026-08-07. Pushes: 54 total, peak 8 in a day. Pull requests: 27 total, peak 5 in a day. Issues: 23 total, peak 3 in a day. Comments: 106 total, peak 30 in a day. Stars: 448 total, peak 9 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| FranticTyping | 85 | 22 | 14 | 35 |
| alexkornitzer | 77 | 32 | 5 | 29 |
| reece394 | 52 | 0 | 4 | 32 |
| 0xFFaraday | 4 | 0 | 2 | 2 |
| chenrui333 | 4 | 0 | 1 | 2 |
| Fuzzdkk | 3 | 0 | 1 | 1 |
| IppSec | 2 | 0 | 0 | 1 |
| rsulliva | 2 | 0 | 0 | 1 |
| unrooted | 2 | 0 | 0 | 1 |
| Sil3ntgh0st | 2 | 0 | 0 | 1 |
| daeho-ro | 1 | 0 | 0 | 0 |
| pdutton-vc | 1 | 0 | 0 | 0 |
| ashokchokalingam | 1 | 0 | 0 | 1 |
| AhmetPayaslioglu | 1 | 0 | 0 | 0 |
| import-pandas-as-numpy | 1 | 0 | 0 | 0 |
Recent activity
Latest issues, pull requests and releases
- Issue#160alexkornitzer2026-05-02 08:59Feature Request: Event Log ID / Sigma Summary
- Pull request#231Fuzzdkk2026-05-02 08:59
- Issue comment#228alexkornitzer2026-04-26 15:24Add analyse gaps subcommand for detecting selective evtx record deletion
- Issue#223alexkornitzer2026-02-10 09:01Feature Request: support YAML multi-document files (multiple Sigma rules separated by --- in a single .yml file)
- Issue comment#222alexkornitzer2025-10-07 19:40[BUG] Issues with 2.13.0 with MFT Library
- Releasegithub-actions[bot]2025-10-07 19:39v2.13.1
- Issue comment#222reece3942025-10-05 15:18Issues with 2.13.0 with MFT LIbrary
- Issue#222reece3942025-10-05 14:47Issues with 2.13.0 with MFT LIbrary
- Issue comment#221reece3942025-09-13 16:07[BUG] Attempt to divide by zero
- Issue comment#221reece3942025-09-13 16:04[BUG] Attempt to divide by zero
- Issue comment#213reece3942025-08-20 21:33MFT Library Fork
- Issue comment#213alexkornitzer2025-08-20 19:28MFT Library Fork
- Pull request#213alexkornitzer2025-08-20 19:28
- Issue comment#221alexkornitzer2025-08-20 19:25[BUG] Attempt to divide by zero
- Issue comment#221alexkornitzer2025-08-17 07:58[BUG] Attempt to divide by zero
- Issue comment#220FranticTyping2025-08-04 09:28Microsoft Defender Flags chainsaw_all_platforms+rules.zip as Trojan:Win32/BatTamper!rfn
- Issue comment#219alexkornitzer2025-07-05 07:08Support for PreAuthType field
- Pull request#219alexkornitzer2025-07-05 07:08
- Issue#215daeho-ro2025-03-28 05:09Wrong version output
- Issue comment#213reece3942025-03-23 14:24MFT Library Fork
- Issue comment#198reece3942025-03-23 13:46[Request] Add Verbose Dev-Logging
- Issue comment#198alexkornitzer2025-03-23 12:22[Request] Add Verbose Dev-Logging
- Issue comment#198alexkornitzer2025-03-23 09:55[Request] Add Verbose Dev-Logging
- Issue comment#198reece3942025-03-22 21:24[Request] Add Verbose Dev-Logging
- Issue comment#198reece3942025-03-22 20:28[Request] Add Verbose Dev-Logging
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 448 stars here means stars gained during the window, not the repo's star count.