corey.lab

EventScope

Search Windows event logs, locally or on remote PCs.

  • Windows 10/11 (x64)
  • v1.0.0
  • 66.1 MB
  • Released 18 Oct 2026
EventScope 1.0.0: quick view buttons along the top, a filter panel on the left with computer, logs, time range, levels, event IDs, source and keyword, and a results grid of events with the selected event message shown below.
Real screenshot of EventScope 1.0.0 in demo mode, showing fictional events (no live logs were read). It was captured running under Wine, so the fonts look a little different from Windows.

About EventScope

EventScope is a standalone event log search tool for Windows. Point it at this PC or a remote computer, pick the logs (System, Application, Security, Setup, or any other channel), and filter by time range, level, event IDs, source and keyword. The filtering happens in the Windows event log service itself, so searches stay fast even on big logs.

For the usual investigations there are nine one-click quick views: unexpected shutdowns, failed logons, account lockouts, service failures, disk and NTFS errors, Windows Update failures, application crashes, logon/logoff history and RDP logons.

Click an event to see its full message and XML, switch to Summary for charts by level, source and event ID, or look the event up online. Results export to CSV or JSON, and you can save your filters as presets.

It’s one self-contained .exe: no installer, and you don’t need to install .NET.

What it does

  • Search local or remote event logs: System, Application, Security, Setup, or all channels
  • Fast server-side filters by time range, level, event IDs, source and keyword
  • Event ID lists, ranges and exclusions (for example 4625, 7000-7034, -4634)
  • Nine one-click quick views: unexpected shutdowns, failed logons, account lockouts, service failures, disk/NTFS errors, Windows Update failures, app crashes, logon/logoff and RDP logons
  • Details pane with the full message and the event XML
  • Summary charts by level, source and event ID
  • Look up an event online by its ID and source
  • Export results to CSV or JSON
  • Saved filter presets (passwords are never saved in them)
  • Restart as administrator to read the Security log

Built with AI

How it was built

EventScope was built by a Cursor cloud agent (an AI coding agent that works in the cloud) from a short request.

Under the hood

  • .NET 8
  • Published as a single self-contained .exe, with no installer
  • 71 unit tests

Changelog

1.0.0 (18 Oct 2026)

  • First release.