• Home
  • Products
  • Training
  • Support
  • About Us
  • Forum
  • Sign In

Event Log Viewer

Discover
  • Find files faster
  • Search within files
  • Search for E-mails
  • Recover deleted files
  • Uncover User Activity
  • Collect system information
  • Password recovery
  • Hidden Disk Areas - HPA/DCO
  • Volume Shadow Copy
  • Web Browser
Identify
  • Verify and match files
  • Find misnamed files
  • Compare drive signatures
  • Timeline viewer
  • File viewer
  • Memory viewer
  • Binary String Extraction
  • Email viewer
  • Registry viewer
  • File system browser
  • Raw disk viewer
  • Thumbnail cache viewer
  • SQLite database browser
  • ESE database browser
  • Prefetch viewer
  • $UsnJrnl viewer
  • Plist viewer
  • Event Log Viewer
  • Web Server Log Viewer
Manage
  • Case management
  • Generate reports
  • Storage device management
  • Drive Imaging
  • Cloud Drive Imaging
  • Cloud Account Imaging
  • Rebuild RAID arrays
  • Portability
  • Secure case logging
  • Support

OSForensics™ now inlcudes the Event Log Viewer, which allows users to view and examine event logs created by Windows Vista and beyond. It supports event logs with file extension .evtx located in the %System32%\winevt\Logs directory.

Some of the main features are:

  • Allows to scan a drive or folder for loading a few Windows Event logs from different systems
  • Supports Windows built-in Event Viewer-like viewing mode and advanced timeline chart view
  • Advanced filtering options to locate interesting events quickly
  • Customizable preset lists to filter forensically interesting Event IDs
  • Supports Regular Expressions pattern search to peform a comprehensive analysis
  • Export events to CSV, TXT or HTML
Home
Discover Identify Manage
Contact Us Legal Disclaimer
Products
OSForensics OSForensics Bootable (USB Flash Drive) Rainbow Tables - 3TB hard disk
Training
Online Training Course Certification Exam - Online Triage Exam - Online Face-to-Face Classes 2022 Events Calendar
Support
Video Demonstrations FAQs and Tutorials OSForensics Forums Australian Head Office North American Branch

Copyright © 2022 PassMark™ Software