Windows Event Logs

To dump the data in EVTX-files, the following tools can be used:

• python-evtx
• evtx

To analyze and search the data in EVTX-files, chainsaw can be used.