Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
4
Posts
3
Users
0
Reactions
584
Views
Topic starter
13/02/2008 7:55 pm
Is it possible to analyse windows xp event logs using linux based / FOSS tools?
thanks!
13/02/2008 8:25 pm
Yes. I have written Perl code for analyzing .evt files, that are based on parsing the files on a binary level without using the MS API at all.
13/02/2008 8:25 pm
Also, check out PyFlag.
15/02/2008 8:06 pm
jhooker,
Absolutely. Both Delve and grokevt may be used to read EVT files.
regards,
farmerdude