Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
yarox24 committed Mar 29, 2016
1 parent 92cc2a5 commit d588680
Showing 1 changed file with 18 additions and 7 deletions.
25 changes: 18 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,13 +1,24 @@
# evtkit
Fix acquired .evt - Windows Event Log files (Forensics)

## Help
evtkit v 0.2 (beta) -== https://github.com/yarox24/evtkit ==-
*** Please provide at least one .evt file or directory containing .evt files
## Requirements
- Python 2 (not tested on 3)
- no external dependencies

Examples:
## Usage
1. Fix in-place 2 files (Make sure you got a copy!):
evtkit.py AppEvent.Evt SysEvent.Evt

```
evtkit.py AppEvent.Evt SysEvent.Evt
```
2. Find all *.evt files in evt_dir/, copy them to fixed_copy/ and repair them:
evtkit.py --copy_to_dir=fixed_copy evt_dir
```
evtkit.py --copy_to_dir=fixed_copy evt_dir
```

## Options
```
-h, --help show this help message and exit
-c COPY_TO_DIR, --copy_to_dir COPY_TO_DIR
Output directory for fixed .evt files.
-q, --quiet Turn off verbosity
```

0 comments on commit d588680

Please sign in to comment.