ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Libevt"

From ForensicsWiki
Jump to: navigation, search
(External Links)
(External Links)
Line 22: Line 22:
* [ Project site]
* [ Project site]
* [ How to export the EventLog with full messages]
* [ How to export the EventLog with full messages from EVT files]

Revision as of 19:54, 15 August 2012

Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL

The libevt package contains a library and applications to read Windows Event Log (EVT) files.


The libevt package contains the following tools:

  • evtinfo, which shows information about EVT files.
  • evtexport, which exports information from EVT files.


Libevt was created by Joachim Metz in 2011.

External Links