A high-performance Python utility to convert Windows Event Log (.evtx) files into structured Excel spreadsheets.
- High-Performance Parsing: Uses a Rust-backed EVTX parser for maximum speed and reliability.
- Data Integrity: Automatically handles complex XML field structures (e.g., EventID with Qualifiers) and extracts pure values.
- Smart Flattening: Deeply nested
EventDatais dynamically flattened into clean Excel columns. - Batch Processing: Scans the
data/directory and processes all.evtxfiles found.
- Supported Versions: Compatible with all modern Windows versions that use the
.evtxformat (Windows Vista, 7, 8, 10, 11 and Windows Server 2008+). - Not Supported: Legacy
.evtfiles from Windows XP or Server 2003 are not supported as they use a different binary format.
- Clone this repository or download the source.
- Install the required dependencies:
pip install -r requirements.txt
- Place your Windows Event Log (
.evtx) files in thedata/folder. - Run the converter:
python evtx_converter.py
- The resulting
.xlsxfiles will be generated in the root directory.
Windows Event Logs often contain sensitive information. This project includes a .gitignore configured to prevent .evtx and .xlsx files from being accidentally uploaded to version control.
This project is licensed under the MIT License - see the LICENSE file for details.