Lookup Windows event messages by id and provider (up to Windows 10).
go install go.foxforensics.dev/eventid@latest$ eventid [PROVIDER:]ID...- Based on the evtx-data by Velocidex.
- Based on the WELM project by NSACyber.
Released under the MIT License.
foxforensics/eventid
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|