Cyberdefense/DeepBlueCLI
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
17b64603b1a213efa211162d9dbd55fc6630267a
DeepBlueCLI/README-DeepBlue.py.md
Eric Conrad 6f1d57219f Update README-DeepBlue.py.md
2017-09-20 10:30:24 -04:00

600 B
Raw Blame History

DeepBlue.py

DeepBlueCLI, ported to Python. Designed for parsing evtx files on Unix/Linux.

libevtx

Requires libevtx: https://github.com/libyal/libevtx

Other evtx frameworks

Note that I tested a few Unix/Linux/Python evtx frameworks.

This is quite popular: https://github.com/williballenthin/python-evtx

I ran into trouble with some .evtx files, where it would crash with this error:

UnicodeDecodeError: 'utf16' codec can't decode bytes in position 0-1: illegal UTF-16 surrogate

I found libevtx 'just worked', and had the added benefit of both Python and compiled options.