Skip to content

Releases: Silv3rHorn/evtx2json

evtx2json-20210503

03 May 11:26
Compare
Choose a tag to compare

evtx2json-20200909

09 Sep 05:30
Compare
Choose a tag to compare
  • Added support for ~124 events (see 7a87e9e, 08060c9, 95d5f38)
  • Changed Timestamp format (replaced UTC with Z)
  • Renamed Timestamp field (*Timestamp to **Timestamp)
  • Added Provider and Level fields (see d63372f, d20a343)
  • Separated original and decoded value into 2 fields (see 2f9d488)
  • Renamed thorough option to alternate option

evtx2json-20190621

21 Jun 15:07
Compare
Choose a tag to compare
  • Added support for ~67 more events (see 146f797, 6e9ae73, 6bbc599, dab7fea)
  • Increased processing speed by defaulting to pyevtx-rs library (python-evtx library can still be used with --thorough option)
  • Added support for event description (each exported event will have an event description by default)
  • Added support for decoding of some event values

evtx2json-20190510

11 May 12:54
Compare
Choose a tag to compare
  • Added support for more events. See a942377
  • Improved output readability in Splunk
  • Resolved bug in formatting of evtxtract (ykfork) output. See #1

evtx2json-20181122

21 Nov 22:50
Compare
Choose a tag to compare
  • Improved support for evtxtract-20180909_ykfork.exe (download below)
  • Support for SEP event id 51
  • Python 3.7 compatibility

evtx2json-20180929

30 Sep 14:34
Compare
Choose a tag to compare
  • Improved support for evtxtract-20180909_ykfork.exe (see above)

evtx2json-20180909

09 Sep 13:40
Compare
Choose a tag to compare
  • Catches more exceptions
  • evtxtract option only works with evtxtract-20180909_ykfork.exe (see above)

evtx2json-20180828

28 Aug 14:35
Compare
Choose a tag to compare
evtx2json-20180828 Pre-release
Pre-release
  • More bug fixes

evtx2json-20180825

25 Aug 12:45
Compare
Choose a tag to compare
  • Added support for RDPClient event 1102
  • Experimental support for evtxtract input (won't work 90% of the time)
  • Bug fixes

evtx2json-20180715

15 Jul 14:36
Compare
Choose a tag to compare
  • Initial Release