dissect.eventlog

Log parser library

Provides parsers for parsing Windows log file formats

A Dissect module implementing parsers for the Windows EVT, EVTX and WEVT log file formats.

GitHub

6 stars
12 watching
1 forks
Language: Python
last commit: 7 months ago

Related projects:

Repository Description Stars
fox-it/dissect.etl A parser for Event Trace Log files used by the Windows operating system to log kernel events. 2
fox-it/dissect.sql An implementation of the SQLite database file format parser in Python. 6
fox-it/dissect.archive Parses various archive and backup formats using Python 0
fox-it/dissect.volume A parser module for various disk volume and partition systems 3
fox-it/dissect.executable A Python module providing parsers for various executable formats like PE, ELF, and Macho-O. 0
fox-it/dissect.jffs A Dissect module implementing a parser for the JFFS2 file system used in router operating systems. 0
fox-it/dissect.clfs A Dissect module implementing a parser for the CLFS file system of Windows 5
fox-it/dissect.ole A parser for the Object Linking & Embedding (OLE) format used by Windows document editors. 3
fox-it/dissect.thumbcache A Dissect module implementing a parser for the Windows thumbcache data format used by Windows Vista+ systems. 1
fox-it/dissect.ffs A Dissect module implementing a parser for the FFS file system used in BSD operating systems 2
fox-it/dissect.ntfs A Dissect module implementing a parser for the NTFS file system used by Windows operating systems 8
fox-it/dissect.fat A Dissect module implementing parsers for FAT and exFAT file systems. 2
fox-it/dissect.shellitem A Dissect module implementing a parser for Shellitem structures commonly used by Microsoft Windows. 2
fox-it/dissect.regf A Dissect module implementing a parser for the Windows registry file format. 3
fox-it/dissect.xfs A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions. 2