grokevt

Log file extractor

A collection of Python scripts to extract information from Windows event log files

GrokEVT is a collection of scripts built for reading Windows® NT/2K/XP/2K3 event log files. GrokEVT is released under the GNU GPL, and is implemented in Python.

GitHub

10 stars
2 watching
4 forks
Language: Python
last commit: 4 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
williballenthin/python-evt A Python module for parsing classic Windows Event Log files (.evt) 48
fox-it/dissect.eventlog This is a Python module that parses Windows log file formats 6
yarox24/evtkit Tool to repair Windows Event Log files (.evt) acquired during forensic investigations 18
williballenthin/python-evtx A Python module for parsing Windows Event Log files (.evtx) into structured data 732
williballenthin/evtxtract Reconstructs fragments of event log data from raw binary files, including unallocated space and memory images. 189
fox-it/dissect.etl A parser for Windows kernel event log files 2
reed1713/elat A toolset for analyzing Windows event logs to detect and analyze malware 29
f3eev/sharkexec A C# toolkit designed to extract credentials and browsing history from Windows systems. 295
barasher/go-exiftool A Go wrapper around ExifTool to extract metadata from various file types. 252
shadawck/glit A tool to gather and extract emails of users from GitHub repositories, organizations, or user profiles. 45
allyshka/pwngitmanager A tool for extracting specific files from git repositories during penetration testing without downloading the entire repository. 107
sumeshi/evtx2es A Python library that enables fast import of Windows Event Logs into Elasticsearch 82
hakky54/certificate-ripper Extracts server certificates from URLs using a fast and easy-to-use CLI tool 713
uknowsec/sharpdecryptpwd A tool for extracting passwords from various Windows applications 1,167
ecmwf/climetlab Provides an interface to weather and climate data for scientific analysis in Python 374