Kali Linux

Winevt_logs_analysis : Searching .evtx Logs For Remote Connections

Winevt logs analysis is a simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions.

You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.

The winevt/Logs folders and the script must have identical file path.

Execution Example

Result Example

R K

Recent Posts

OSINT Framework Official Website: Categories, Use Cases and Safer Alternatives

The OSINT Framework official website is one of the easiest places to start open-source intelligence…

2 hours ago

OSINT Framework Website Guide: How to Use OSINTFramework.com Without Getting Lost

The OSINT Framework website is one of the most popular starting points for open-source intelligence…

2 hours ago

Fail2ban Ubuntu Setup: Protect Your Server from Attacks

Internet-facing servers are constantly targeted by bots searching for weak passwords and vulnerable services. A…

2 hours ago

Add Remove Users Ubuntu: Complete User Management Guide

Managing user accounts is one of the most important administrative tasks on any Linux system.…

3 hours ago

Install Slack Ubuntu – Easy Setup Guide for Ubuntu 20.04

Install Slack Ubuntu systems quickly and start collaborating with your team from a powerful communication…

3 hours ago

Install Atom Ubuntu: Easy Setup Guide for Developers

If you're looking for a flexible and customizable code editor, Install Atom Ubuntu is a…

3 hours ago