Difference between revisions of "Libevtx"
From Forensics Wiki
Joachim Metz (Talk | contribs) |
Joachim Metz (Talk | contribs) |
||
| (One intermediate revision by one user not shown) | |||
| Line 9: | Line 9: | ||
The '''libevtx''' package contains a library and applications to read [[Windows XML Event Log (EVTX)]] files. | The '''libevtx''' package contains a library and applications to read [[Windows XML Event Log (EVTX)]] files. | ||
| − | |||
| − | |||
| − | |||
| − | |||
== Tools == | == Tools == | ||
| Line 18: | Line 14: | ||
* '''evtxinfo''', which shows information about EVTX files. | * '''evtxinfo''', which shows information about EVTX files. | ||
* '''evtxexport''', which exports information from EVTX files. | * '''evtxexport''', which exports information from EVTX files. | ||
| + | |||
| + | == History == | ||
| + | Libevtx was created by [[Joachim Metz]] in 2011. | ||
== External Links == | == External Links == | ||
| − | * [http://code.google.com/p/libevtx/ | + | * [http://code.google.com/p/libevtx/ Project site] |
Latest revision as of 05:56, 29 July 2012
| libevtx | |
|---|---|
| Maintainer: | Joachim Metz |
| OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
| Genre: | Analysis |
| License: | LGPL |
| Website: | code.google.com/p/libevtx/ |
The libevtx package contains a library and applications to read Windows XML Event Log (EVTX) files.
[edit] Tools
The libevtx package contains the following tools:
- evtxinfo, which shows information about EVTX files.
- evtxexport, which exports information from EVTX files.
[edit] History
Libevtx was created by Joachim Metz in 2011.