2.9.30
Released 8 Nov 2026
Official Codepoint Studio website
Windows event logs made simple
This autonomous agent searches exported log files you give it and checks windows event logs on Windows 10 or 11 with version 2.9.30. Version 2.9.30.
Find the failed logon attempts in the security log and list the source IP addresses.
- list_dir
logs/security-copy.csv1 file - grep
EventID 462512 matches - read_file
security-copy.csv12 lines - write_file
investigation-notes.txtsaved - edit_file
investigation-notes.txt+18 lines
waiting for your OK before the next stepRejectAccept
34 MB
Standard installer size
25 MB
Single .exe available
13
Interface languages
4624
Successful logon ID
4625
Failed logon ID
Check windows event logs
Codepoint Studio reads your exported windows event logs and searches for specific event IDs without changing the original files, so you can verify every result before accepting the findings. Privacy stays on your PC. Version 2.9.30 supports this workflow for local analysis. It ensures privacy for your data and keeps secrets safe.
Find failed logons (4625)
The agent uses grep to search for event ID 4625 across the exported data and then reads the matching lines to identify the source IP addresses, ensuring precise results. Securely processed. You review the results in Ask first mode before the agent writes a summary note. This ensures you verify the data before keeping the report. The system processes windows system logs securely for your needs. The agent uses read_file to read lines around a hit and writes a summary to keep the note.
Tool trace
grep 4625 → 5 matches
read_file → 5 lines
grep 192.168 → 3 matchesCheck windows event log for service changes
Export the system log to CSV so grep scans the text for event ID 7045, and Shell runs your export command to retrieve the data from the log. Read the file. Use read_file to parse the text content for detailed analysis of the events. edit_file writes the list of installed services to a new text file. Check windows event log carefully to ensure all relevant data is captured. The agent searches for event ID 7045 to find new service installations.
Tool trace
read_file → 100 lines
grep 7045 → 2 matches
write_file → savedInvestigate unexpected shutdowns (6008)
You export event viewer logs to a CSV file so the agent can search for event ID 6008, which indicates an unexpected shutdown, and read the surrounding lines to find the error. Save the output. The agent uses grep to search for the event ID and reads lines to find the error. It writes a short note using write_file and edit_file to keep an investigation log. You review the note in Ask first mode to decide if further action is needed. The windows logs contain records made by Windows and apps about errors.
Tool trace
grep 6008 → 1 match
read_file → 1 line
write_file → savedAnalyze system logs for errors
grep searches the exported text for error level events, and read_file identifies the source of those errors so that you can verify the agent's analysis of the logs. Confirm findings. The autonomous agent runs on Windows 10 and 11 x64 machines. Event id 6008 points to an unexpected shutdown event clearly. It rarely names the specific cause of the crash directly. You review the summary in Ask first mode now carefully.
Tool trace
grep error → 4 matches
read_file → 4 lines
write_file → savedHow it differs from a typical chat assistant
Codepoint Studio v2.9.30 runs commands and shows results, so you understand what logs mean for your machine. Interface in 13 languages.
| Typical chat assistant | Codepoint Studio | |
|---|---|---|
| Action | Suggests commands | Runs commands |
| Output | Text description | Real result |
| Editing | No changes | Shows diff |
| Approval | None | Ask first |
How to get started
- Download the 34 MB setup program from the download button.
- Install the agent on your Windows 10 or 11 machine.
- Open the app and select your preferred AI model.
- Export your logs and start the investigation.
Who uses it and when
When a pc crashes no associated event log appears, the agent helps investigate the cause by listing what is there because logs often leave little useful data for analysis. It reads. Beginners use the agent to read logs and export them.
The agent searches large exports and writes notes, so practitioners review the diff before accepting the changes made to the files by the tool. Safe export. It works well for exporting logs to CSV files safely.
Administrators export the security log to search for 4625 and the agent reads the file to list the IPs so you verify the findings. You verify. Ask first pauses before actions that change something, such as writing a file.
Frequently asked questions
What are windows event logs?
Windows event logs are records made by Windows and apps about sign-ins, services, errors and changes, and you can export them for detailed analysis. You control the data. They include the Security, System and Application logs that help you understand what happened on your machine.
Is codepointbd.com the official Codepoint Studio website?
Yes, codepointbd.com is the official Codepoint Studio website, and the download button provides the 34 MB setup program which you can verify using certutil. It is official. The installer is not code-signed yet, so check the checksum.
Does the agent read logs live?
No, the agent reads exported copies of logs and does not monitor events in real time, so you export the log first for thorough analysis. Check carefully. The ID alone is not a verdict for every event you see.
What is an evtx viewer?
An EVTX viewer opens saved log files, and Codepoint reads the exported CSV or text data to help you investigate the events properly today. Export logs first. Use the agent to search and analyze the content now.
How do you understand what logs mean?
Log analysis is the process of interpreting event records to understand system behavior and identify potential issues, so the agent reads the lines around the match to help you understand the context. Yes, it does. This approach works well for Ask first mode and keeps changes safe.
Can I export event viewer logs?
Yes, you can export logs from Event Viewer as CSV or text, and the agent searches these files to find event IDs and writes notes to your folder. Check the notes. It reads your exports carefully to ensure accuracy and provides a summary.
What is the difference between the Security log and the audit log?
The Security log is the specific record where audit policy dictates Windows stores security events, and it contains entries only when the system is configured to track them. It is selective. The agent reads these entries after you export them to a file.
Start investigating your logs
Download the 34 MB setup program for Windows 10 or 11, and the portable version is also available for immediate use. Download.
Download Codepoint Studio for Windows ↗Explore more
Every page of this website is available in 20 languages.
Product overview ↗ Model configuration ↗ Workflow examples ↗ Download installer ↗ FAQ and support ↗ Privacy policy ↗
