EVTXtract

EVTXtract is new tool for Windows Event Log Analysis. It can recover and extract entries of Windows Event Log files from files, dd images, unallocated space, memory dumps.

 

You can find more info about EVTXtract here.

Leave a Reply

Your email address will not be published. Required fields are marked *