How baichuan-di/winlog-insight works
WinLog Insight is a local Windows security-log analysis desktop tool. Its documented workflow is to scan Application, Security, and System logs, apply built-in security rules to identify threats, and present risk levels and a security score; users can also monitor incoming logs for alerts and export audit reports. Custom rules extend analysis. The README describes these capabilities but no source code or file tree beyond README.md was provided, so component paths and relationships below reflect documentation only. AI analysis is described as a planned capability.
Main entry points: README.md Log scanner
Components 14
Log analysis
- Log scanner
README.md - Windows event logs
- Security rules
README.md - Threat findings
README.md
Risk response
- Live monitor
README.md - Security alerts
README.md - Risk dashboard
README.md - Risk summary
README.md
Audit and rules
- Report export
README.md - Audit reports
README.md - Custom rules
README.md
Planned AI
- AI analysis
README.md - External LLM
Other components
- User
Connections 15
- User → Log scanner: starts scan
README.md - Log scanner → Windows event logs: reads logs
README.md - Log scanner → Security rules: analyzes logs
README.md - Security rules → Threat findings: identifies threats
README.md - User → Live monitor: starts monitoring
README.md - Live monitor → Windows event logs: watches stream
README.md - Live monitor → Security alerts: raises alerts
README.md - User → Risk dashboard: views dashboard
README.md - Risk dashboard → Risk summary: shows distribution
README.md - User → Report export: exports report
README.md - Report export → Audit reports: generates reports
README.md - User → Custom rules: defines rules
README.md - Custom rules → Security rules: extends rules
README.md - User → AI analysis: requests analysis
README.md - AI analysis → External LLM: calls model
README.md