yampelo/beagle

Health v2 · maintenance only

Adoption not part of the score

1351 stars · 151 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Beagle is an incident response and digital forensics tool that transforms security logs and data sources such as EVTX files, SysMon logs, FireEye HX triages, PCAPs, and memory images into graphs. It can be used as a Python library or through a web interface, and outputs graphs to Neo4j, DGraph, or local NetworkX objects.

Use cases

• transform evtx and sysmon logs into investigation graphs
• analyze fireeye hx triage data as a graph
• load windows memory images for forensic analysis
• send forensic graphs to neo4j or dgraph for threat hunting
• explore incident response artifacts interactively in a web ui
• combine multiple forensic data sources into one graph

When to choose

• you need to turn DFIR artifacts like EVTX, SysMon, or memory dumps into navigable graphs
• you want a Python library plus web UI for forensic graph generation
• you want to push investigation graphs into Neo4j or DGraph

When to avoid

• you need a full SIEM or log aggregation platform
• your data sources are unsupported by Beagle's datasource list
• you need actively developed tooling with frequent releases

Facets

application · maturity maintenance

security parser data-visualization security developer-tools analytics python cross-platform dfir incident-response digital-forensics threat-hunting graph-database networkx neo4j evtx sysmon graph docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yampelo/beagle")