March 27, 2022, 8:46 p.m. | /u/Jonathan-Todd

cybersecurity www.reddit.com

Before realizing we could just use `Get-EventLog` and `Get-WinEvent`, then pipe that to `ConvertTo-Json`, we (being new to the industry) were planning on exporting all of the `.evtx` and `.etl` files, then using various open source parsers to convert them to JSON, then to DataFrames in Python for some data science and visualization.

I guess that's a still useful approach if we don't have access to a live system, only a forensic image of a file-system. But definitely if `Get-EventLog` …

cybersecurity eventlog evtx files logs

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Cyber Threat Analyst

@ Peraton | Morrisville, NC, United States

Kyndryl Offensive Security Professional - Threat-Led Penetration Testing (TLPT) and Red Teaming

@ Kyndryl | Sao Paulo (KBR51645) WeWork Office

Consultant en Cyber Sécurité - Spécialiste PKI H/F

@ Devoteam | Levallois-Perret, France

Cloud Security Architect - Advisor (Remote)

@ Fannie Mae | Reston, VA, United States

OT Cybersecurity Engineer

@ SBM Offshore | Bengaluru, IN, 560071