Libevt
From Forensics Wiki
Revision as of 14:54, 15 August 2012 by Joachim Metz (Talk | contribs)
| libevt | |
|---|---|
| Maintainer: | Joachim Metz |
| OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
| Genre: | Analysis |
| License: | LGPL |
| Website: | code.google.com/p/libevt/ |
The libevt package contains a library and applications to read Windows Event Log (EVT) files.
Tools
The libevt package contains the following tools:
- evtinfo, which shows information about EVT files.
- evtexport, which exports information from EVT files.
History
Libevt was created by Joachim Metz in 2011.