williballenthin/pltsnow
Automatically exported from code.google.com/p/pltsnow
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Public repository record indexed from GitHub. Explore verified star velocity metrics, source code repositories, and curated developer tool directories across the GitHubRepo ecosystem.
Automatically exported from code.google.com/p/pltsnow
please use https://github.com/fireeye/vivisect instead
Pure Python parser for classic Windows Event Log files (.evt)
Reconstruct process trees from event logs