search

dfirrequests / CodeRequests

A place where people can request scripts/code be written.
1 stars 0 forks source link

Powershell script for bulk evtx to csv conversion #2

Open Old-Bob opened 9 years ago

Old-Bob commented 9 years ago

I'm looking for a powershell script that will allow me to point at a folder filled with evt and/or evtx files and convert each to a csv and/or txt file.

ghost commented 9 years ago

Quick Google turned this up. Will this work? I haven't tested.

$a = Get-Item c:\tmp*.evtx foreach($file in $a) { get-winevent -path $file.FullName | export-csv $file.FullName.replace(".evtx",".csv") -useculture }