all options
buster  ] [  bullseye  ] [  bookworm  ] [  trixie  ] [  sid  ]
[ Source: grokevt  ]

Package: grokevt (0.5.0-2)

Links for grokevt

Screenshot

Debian Resources:

Download Source Package grokevt:

Maintainers:

External Resources:

Similar packages:

scripts for reading Microsoft Windows event log files

GrokEVT is a collection of scripts built for reading Microsoft Windows NT/2000/XP/2003 event log files.

Currently the scripts work together on one or more mounted Microsoft Windows partitions to extract all information needed (registry entries, message templates, and log files) to convert the logs to a human-readable format.

This program is useful in forensics investigations.

Tags: System Administration: Logging, User Interface: Command Line, Role: role::program, security::forensics, Security: Log Analyzer, Purpose: use::converting, works-with::logfile

Other Packages Related to grokevt

  • depends
  • recommends
  • suggests
  • enhances

Download grokevt

Download for all available architectures
Architecture Package Size Installed Size Files
all 34.2 kB120.0 kB [list of files]