idkwim / evtxtract Goto Github PK
View Code? Open in Web Editor NEWThis project forked from williballenthin/evtxtract
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
License: Apache License 2.0