Difference between revisions of "Libevt"
From Forensics Wiki
Joachim Metz (Talk | contribs) |
Joachim Metz (Talk | contribs) (→External Links) |
||
| (One intermediate revision by one user not shown) | |||
| Line 22: | Line 22: | ||
* [http://code.google.com/p/libevt/ Project site] | * [http://code.google.com/p/libevt/ Project site] | ||
| + | * [http://code.google.com/p/libevt/wiki/evttools How to export the EventLog with full messages from EVT files] | ||
Latest revision as of 14:54, 15 August 2012
| libevt | |
|---|---|
| Maintainer: | Joachim Metz |
| OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
| Genre: | Analysis |
| License: | LGPL |
| Website: | code.google.com/p/libevt/ |
The libevt package contains a library and applications to read Windows Event Log (EVT) files.
[edit] Tools
The libevt package contains the following tools:
- evtinfo, which shows information about EVT files.
- evtexport, which exports information from EVT files.
[edit] History
Libevt was created by Joachim Metz in 2011.
