I have a .evtx (Windows Event Log) file, and want to view it on Linux.
- Easy to install/run
- Works on Linux
- Command line tools are OK, GUIs are OK
Software Recommendations Stack Exchange is a question and answer site for people seeking specific software recommendations. It only takes a minute to sign up.Sign up to join this community
I found something that meets all your requirements, the only drawback is that the logs are a bit hard to parse by a human.
python-evtx (GitHub repo) is free/libre and is easy to install using
pip install python-evtx. Use the command
python /usr/bin/evtx_dump.py some.evtx > some.xml
You'll end up with an XML with the logs content.