dissect.eventlog
Log parser
This is a Python module that parses Windows log file formats
A Dissect module implementing parsers for the Windows EVT, EVTX and WEVT log file formats.
6 stars
12 watching
1 forks
Language: Python
last commit: 5 months ago Related projects:
| Repository | Description | Stars |
|---|---|---|
| fox-it/dissect.etl | A parser for Windows kernel event log files | 2 |
| fox-it/dissect.sql | A Dissect module implementing parsers for the SQLite database file format. | 6 |
| fox-it/dissect.archive | A Dissect module implementing parsers for various archive and backup formats. | 0 |
| fox-it/dissect.volume | A Python module implementing parsers for various disk volume and partition systems | 3 |
| fox-it/dissect.executable | A module implementing parsers for various executable file formats. | 0 |
| fox-it/dissect.jffs | A Dissect module implementing a parser for the JFFS2 file system used in router operating systems. | 0 |
| fox-it/dissect.clfs | A parser module for the CLFS file system of Windows. | 5 |
| fox-it/dissect.ole | A Python module that parses the Object Linking & Embedding (OLE) format used by document editors on Windows operating systems. | 3 |
| fox-it/dissect.thumbcache | An implementation of a parser for the Windows thumbcache. | 1 |
| fox-it/dissect.ffs | A Dissect module implementing a parser for the FFS file system | 2 |
| fox-it/dissect.ntfs | A parser for the NTFS file system used in Windows operating systems | 8 |
| fox-it/dissect.fat | A module implementing parsers for FAT and exFAT file systems used on flash memory storage devices | 2 |
| fox-it/dissect.shellitem | A Dissect module implementing a parser for the Shellitem structures used by Microsoft Windows | 2 |
| fox-it/dissect.regf | A Dissect module for parsing Windows registry file format | 3 |
| fox-it/dissect.xfs | A parser for the XFS file system used by RedHat Linux distributions. | 2 |