This tool parses Windows Event Logs (particularly Active Directory logon/logoff events) and renders them as an interactive graph of host-account relationships, helping investigators identify an attacker's lateral movement patterns across a corporate network.