#

#

Let’s get into windows event forwarding and auto-analysis! Featured on the 9/18 linux weekly. A think I’m tinkering with.

Recently We’ve begun creating a software we call “Event Horizon.” It’s a tool that collects and simplifies the mass amount of error and issue reporting present in a Windows PC. The main objective is to make it so that even those without a background in computers can understand and solve technical problems in their PC with the help of AI.

The general process involves connecting a PC to the database, having that PC send error reports via things like Sysmon and powershell logging, and then asking a local LLM to consolidate that data into simplified and easily understandable findings

#

What follows is screenshots of our very early adaptation of the idea. The final product would likely see many revisions beyond this initial mockup, but overall this design provides a good idea of our vision.

Here you can see the main dashboard, it consolidates all the info of the PCs in the database. It provides statistics, graphs, and tables that summarize the data received that day.

Going down the menu we get to the event log, this is a dumping ground for all the data that the database is receiving. This can allow you to look at specific isolated notifications rather than the generalized findings that the AI provides.

We intend to make use of many search filter options in order to narrow down the wide stream of data as much as possible.

A rather self-explanatory page, simply lists all the computers and devices you have connected to Event Horizon.

You can even click on them and get a better look at a dashboard curated to that computer specifically.

#

Here is the most important page, effectively the entire point of the product. This page is collections of events the local AI has deemed notable evidence for possible issues. Issues range from basic notable info and minor warnings to a scale of problems ranging from low to critical.

You can click on each finding individually to get a better idea of why its an issue and the AI’s advice on how to solve it.

There are a few other important pages worth noting within the program, from your basic configuration where you set up and decide which AI model you’d like to use:

To a step by step tutorial on how to add new PCs to the database:

Overall we’d love to hear what you think. It’s in very early stages so we’d love your feedback or if you even think it’s a worthwhile endeavor at all.