Difference between pages "DEFT Linux 2" and "Libevt"
From Forensics Wiki
(Difference between pages)
Zakiakhmad (Talk | contribs) |
Joachim Metz (Talk | contribs) |
||
| Line 1: | Line 1: | ||
{{Infobox_Software | | {{Infobox_Software | | ||
| − | name = | + | name = libevt | |
| − | maintainer = [[ | + | maintainer = [[Joachim Metz]] | |
| − | os = | + | os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] | |
| − | genre = {{ | + | genre = {{Analysis}} | |
| − | license = {{ | + | license = {{LGPL}} | |
| − | website = [http:// | + | website = [http://code.google.com/p/libevt/ code.google.com/p/libevt/] | |
}} | }} | ||
| − | ''' | + | The '''libevt''' package contains a library and applications to read [[Windows Event Log (EVT)]] files. |
| − | == | + | == History == |
| − | + | Libevt was created by [[Joachim Metz]] in 2011. | |
| − | + | == Tools == | |
| − | + | The '''libevt''' package contains the following tools: | |
| − | : | + | * '''evtinfo''', which shows information about EVT files. |
| − | + | * '''evtexport''', which exports information from EVT files. | |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | == External Links == | |
| − | : | + | * [http://code.google.com/p/libevt/ libevt project site] |
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
| − | + | ||
Revision as of 04:05, 21 July 2012
| libevt | |
|---|---|
| Maintainer: | Joachim Metz |
| OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
| Genre: | Analysis |
| License: | LGPL |
| Website: | code.google.com/p/libevt/ |
The libevt package contains a library and applications to read Windows Event Log (EVT) files.
History
Libevt was created by Joachim Metz in 2011.
Tools
The libevt package contains the following tools:
- evtinfo, which shows information about EVT files.
- evtexport, which exports information from EVT files.
