Wow
Really opened my eyes to the online world
Free
About
This app provides a comprehensive reference for Windows Event IDs crucial for cybersecurity and digital forensics. It includes investigative notes, detection rules, and MITRE ATT&CK mappings to aid in fast, context-rich lookups. Users can also describe attack scenarios to surface relevant Event IDs with context.
✓Windows EVTX log channel reference
✓Investigative notes for Event IDs
✓Detection rules (KQL, Sigma)
✓MITRE ATT&CK mappings
✓Scenario-based Event ID lookup
✓Shareable EID details (text, Markdown)
Show original description
What's New in EIDVault
1.1.1
May 27, 2026
Privacy Policy link updated
User reviews
FAQ
What is EIDVault?
EIDVault is a free reference application for Windows Event IDs, designed to assist cybersecurity and DFIR professionals. It provides detailed investigative notes, detection rules, and MITRE ATT&CK mappings for quick analysis of log data.
Is EIDVault free to use?
Yes, EIDVault is completely free to use. It does not have any in-app purchases or subscription fees, making it an accessible tool for all users.
What devices does EIDVault support?
EIDVault is available for iPhone and iPad devices. It is optimized for mobile use, allowing for quick lookups on the go.
How often is EIDVault updated?
The latest version of EIDVault is 1.1.1, which was last updated on May 27, 2026. This indicates a commitment to keeping the reference data current.
What is the age rating for EIDVault?
EIDVault has an age rating of 17+. This is likely due to the technical and sensitive nature of cybersecurity and digital forensics content.
Can I share EID information from EIDVault?
Yes, EIDVault allows you to share Event ID details as plain text or formatted Markdown. This feature is useful for documentation and collaboration with team members.
Does EIDVault have ads?
No, EIDVault does not contain advertisements. As a free application, it focuses on providing a clean and uninterrupted user experience for its reference material.
How does EIDVault help with incident response?
EIDVault helps with incident response by providing immediate access to context-rich information about Windows Event IDs. The inclusion of investigative notes, detection rules, and MITRE ATT&CK mappings allows for faster identification and analysis of security events.