{"id":17244668,"url":"https://github.com/kost/spitevents","last_synced_at":"2025-03-26T04:42:40.224Z","repository":{"id":15048918,"uuid":"17774983","full_name":"kost/SpitEvents","owner":"kost","description":"Useful scripts to parse various events/logs including Windows Events","archived":false,"fork":false,"pushed_at":"2014-03-15T13:39:01.000Z","size":140,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-01-31T06:39:43.051Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Perl","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kost.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-03-15T12:32:11.000Z","updated_at":"2014-09-09T16:58:20.000Z","dependencies_parsed_at":"2022-09-24T01:24:15.022Z","dependency_job_id":null,"html_url":"https://github.com/kost/SpitEvents","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2FSpitEvents","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2FSpitEvents/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2FSpitEvents/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kost%2FSpitEvents/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kost","download_url":"https://codeload.github.com/kost/SpitEvents/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245591617,"owners_count":20640692,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-15T06:26:52.345Z","updated_at":"2025-03-26T04:42:40.206Z","avatar_url":"https://github.com/kost.png","language":"Perl","funding_links":[],"categories":[],"sub_categories":[],"readme":"SpitEvents\n==========\nUseful scripts to parse various events/logs including Windows Events\n\nSo far, there is:\n\nspitwinevents.pl - Useful for extracting windows events in evtx to CSV\n\nUsage\n=====\nExtract me relevant authentication events from security-events.evtx:\n\n`spitwinevents.pl -p auth security-events.evtx`\n\n\nExtract me events with ID 4624,4634 (login/logoff):\n\n`spitwinevents.pl -e 4624,4634 security-events.evtx`\n\n\nExtract me login/logoff authentication events with additional fields specified in -f:\n\n`spitwinevents.pl -f TargetUserName,TargetDomainName,LogonType,TargetLogonId,IpAddress,IpPort -e 4624,4634 security-events.evtx`\n\n\nRequirements\n============\nIn short, it requires Perl, Parse::Evtx and XML::Simple.\n\n\nBut I guess copy \u0026 paste from the perl file will help you:\n```perl\nuse Parse::Evtx;\nuse Parse::Evtx::Chunk;\nuse Carp::Assert;\nuse XML::Simple;\nuse IO::File 1.14;\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkost%2Fspitevents","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkost%2Fspitevents","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkost%2Fspitevents/lists"}