CMTrace Open

About

CMTrace Open is a native workspace for investigating Windows endpoint evidence, taking you from raw logs to one coherent incident. It is designed so that you can inspect the original log context without losing the sequence of events around a failure. Analysis happens locally on your machine, and the app requires no account to start investigating.

The product makes a deliberately simple trust promise: the running application sends no analytics, usage, device, crash, identity, or behavioral telemetry. Its code is open source, and the way it is built and how its releases are published can be inspected.

CMTrace Open is available for Windows, and the website offers field guides covering topics such as opening and reading logs, how log format auto-detection works, a built-in catalog of known log sources, and real-time tailing of live logs. Support and feedback are available through its Discord community.