Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
winevt_logs_analysis — Parses Windows .evtx logs to identify remote connections and public IPs by analyzing EventIDs related to remote logins and sessions. | Kitploit
Tools/GitHubGitHub/georgi-i/winevt_logs_analysis
ForensicsDigital ForensicsLog Analysis
GitHubgeorgi-i/winevt_logs_analysis

winevt_logs_analysis

Parses Windows .evtx logs to identify remote connections and public IPs by analyzing EventIDs related to remote logins and sessions.

View Repository
2423 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Winevt logs analysis (Remote connections)

Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions.

You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.

The winevt/Logs folders and the script must have identical file path.

Execution Example

Image of Spreadsheet

Result Example

Image of Spreadsheet

Download Tool