EIDVault

Windows Event ID Reference

Free · Designed for iPad. Not verified for macOS.

Browse Windows Event IDs (EIDs) with ATT&CK mappings, investigation notes, and detection guidance - on-device, no network required. EIDVault is a comprehensive reference for Windows® EVTX log channels relevant to cybersecurity and DFIR. Event IDs (EIDs) are enriched with investigative notes, detection rules (KQL, Sigma, and more), and MITRE ATT&CK® mappings for fast, context-rich lookups. The Scenarios tab takes it further - describe an attack technique or investigation scenario and on-device intelligence surfaces the relevant EIDs with context. Share EID details as plain text or formatted Markdown for easy documentation or collaboration.

  • 5.0
    out of 5
    2 Ratings

Privacy Policy link updated

The developer, Zachary Burnham, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Collected

    The developer does not collect any data from this app.

    Privacy practices may vary, for example, based on the features you use or your age. Learn More

    The developer has not yet indicated which accessibility features this app supports. Learn More

    Seller
    • Zachary Burnham
    Size
    • 8.3 MB
    Category
    • Reference
    Compatibility
    Requires iOS 26.0 or later.
    • iPhone
      Requires iOS 26.0 or later.
    • iPad
      Requires iPadOS 26.0 or later.
    • Mac
      Requires macOS 26.0 or later and a Mac with Apple M1 chip or later.
    Languages
    • English
    Age Rating
    16+
    Copyright
    • © 2026 Zachary Burnham