Kali Linux

Winevt_logs_analysis : Searching .evtx Logs For Remote Connections

Winevt logs analysis is a simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions.

You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.

The winevt/Logs folders and the script must have identical file path.

Execution Example

Result Example

R K

Recent Posts

Install Redis on Ubuntu: Configuration and Remote Access

Redis is an open-source, in-memory key-value store built for raw speed and versatility. It works equally well as…

4 hours ago

Install Skype on Ubuntu: Two Methods That Actually Work

Skype doesn't ship with Ubuntu by default it's a proprietary application owned by Microsoft and…

5 hours ago

Install PHP on Ubuntu: Complete Setup Guide for Apache & Nginx

PHP is the backbone of the web. Frameworks like Laravel, WordPress, and Magento all run on…

5 hours ago

Best OSINT Tools for Cybersecurity Teams 2026: Threat Intel and Exposure Checks

Cybersecurity teams use OSINT to see what attackers can already see from public sources. In…

6 hours ago

Best Legal OSINT Tools 2026: Research Safely Without Crossing Privacy Lines

Legal OSINT is about collecting and analyzing publicly available information without bypassing privacy controls, breaking…

6 hours ago

Mono Ubuntu Install: Complete Setup Guide for 20.04

Developers building cross-platform .NET applications often rely on Mono Ubuntu Install to create a flexible…

7 hours ago