Skip to content

Commit

Permalink
[Modify] README.mdに説明を追記した
Browse files Browse the repository at this point in the history
  • Loading branch information
tsalvia committed May 30, 2019
1 parent 696bdff commit 1b5bb2c
Showing 1 changed file with 47 additions and 3 deletions.
50 changes: 47 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,52 @@
# evtxdump

## ビルド方法
Parse the EVTX file and output it in JSON format.

## Build

```
go get github.com/0xrawsec/golang-evtx/evtx
go get -u github.com/0xrawsec/golang-evtx/evtx
go build evtxdump.go
```
```

## Usage

```
$ evtxdump.exe -i Security.evtx
```

## Options

```
-d string
This option is a short version of "--directory" option.
-directory string
Specifies the destination directory for the converted files.
(default "output")
-i string
This option is a short version of "--input" option.
-ids string
Specifies the event ID you want to output JOSN files.
Use "," to separate multiple IDs.
(default All Event IDs)
-input string
This option is required.
Specifies the EVTX file you want to convert to JSON file.
```

## Examples

1. Basic Usage
```
$ evtxdump.exe -i Security.evtx
```

2. Specify the event IDs you want to output.
```
$ evtxdump.exe -i Security.evtx -ids 4624,4625,1102
```

3. Specify the destination directory.
```
$ evtxdump.exe -i Security.evtx -d output/jsons
```

0 comments on commit 1b5bb2c

Please sign in to comment.