microsoft defender for endpoint export forensic analyzer — free browser tool | fatcousin

drop mde hunting export · parse device process/network events · runs locally

input

drop vendor edr/siem export

csv · json · jsonl · multiple files · local only

Select file

advanced hunting · device events · local export only

limits

heuristic screener · vendor schema varies · not definitive proof

status

>ready