Kali Linux

Winevt_logs_analysis : Searching .evtx Logs For Remote Connections

Winevt logs analysis is a simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions.

You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.

The winevt/Logs folders and the script must have identical file path.

Execution Example

Result Example

R K

Recent Posts

Bootable Ubuntu USB Guide: Create One from Linux Fast

A Bootable Ubuntu USB is one of the most useful tools for Linux users. Whether…

24 hours ago

VSFTPD FTP Server Setup on Ubuntu 20.04 Securely

Managing file transfers across networks remains a common requirement for businesses and administrators. A VSFTPD…

1 day ago

Install Asterisk Ubuntu: Complete Setup Guide for 2026

Voice communication remains a critical part of modern business operations, and Install Asterisk Ubuntu is…

1 day ago

VNC Server Ubuntu: Secure Remote Desktop Setup Guide

Managing Linux servers remotely is a common requirement for system administrators and developers. While command-line…

1 day ago

NFS Server Setup on Ubuntu 20.04: Complete Configuration Guide

Network file sharing remains an essential part of Linux infrastructure, and NFS Server Setup is…

2 days ago

Install Gitea Ubuntu: Complete Setup Guide for Developers

Managing source code efficiently is essential for modern software development, and Install Gitea Ubuntu is…

3 days ago