EVTX Session Auditor - Flask Web App

🚀 Overview
EVTX Session Auditor is a web-based tool designed to analyze Windows Security Event Logs (.evtx files). It extracts logon and logoff session data and presents it in a user-friendly table format.

This tool is an extension of the LogonSessionAuditor project, adding:
✔️ A modern Flask web interface
✔️ Enhanced filtering (removing service accounts)
✔️ CSV export functionality

🔥 Features
✅ Upload and analyze Windows Security EVTX logs
✅ Automatically filters out service accounts ($ usernames)
✅ Parses logon (4624) & logoff (4634, 4647) events
✅ Displays results in a searchable, sortable table
✅ Download results as a structured CSV file
✅ Formatted timestamps (YYYY-MM-DD HH:MM:SS)
✅ Standalone executable available (no Python required)

🛠 Installation & Usage
📥 Download
🔹 Get the latest standalone executable from the Releases Page.

⚡ Running the Application
1️⃣ Download LogonSessionAuditor.exe
2️⃣ Right-click & Run as Administrator
3️⃣ The web interface will open automatically in your default browser

🔹 System Requirements
🖥 Windows OS
✅ Administrator privileges (Required to access EVTX logs)
🤝 Contributing
We welcome contributions! 🚀
🔹 Fork the repository
🔹 Add new features or improvements
🔹 Submit a Pull Request

📜 Credits
This project extends the LogonSessionAuditor by @0xHasanM. Huge thanks for the original work! 🙌

📄 License
Released under the MIT License.