One config drives eight live views — what's firing, what's missing, and what it costs.
How to use it: Set your config on the left, then explore any tab below. Everything updates live from the same state.
Audit Policy & Log Sources
Import your real config
Select one or more at once — each is detected automatically:
• auditpol /get /category:* /r output (.csv/.txt)
• Sysmon config (.xml)
• PowerShell logging GPO export (.reg)
🔒 Read in your browser only. Files are never uploaded, transmitted, or stored anywhere — parsing happens entirely on this device.
Impact of last change✕ dismiss
This config drives every tab above — events firing, framework coverage, gaps, dependencies, and cost.
GravityLog