
GrokEVT is a tool for reading Windows event log files and converting them to a human-readable format.
Checked October 2026.
GrokEVT is a collection of scripts built for reading Windows® NT/2K/XP/2K3 event log files. GrokEVT is released under the GNU GPL, and is implemented in Python.
The scripts work together on one or more mounted Windows® partitions to extract all information needed (registry entries, message templates, and log files) to convert the logs to a human-readable format.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about GrokEVT: features, pricing and alternatives.
GrokEVT is a product in the Digital Forensics category. It covers Windows and Log Management.
GrokEVT is free. Download and setup instructions are at https://github.com/ecbftw/grokevt/.
Alternatives to GrokEVT listed on CybersecTools:
Compare all GrokEVT alternatives at https://cybersectools.com/alternatives/grokevt
GrokEVT is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A PowerShell-based DFIR automation tool that streamlines artifact and evidence collection from Windows machines for digital forensic investigations.
Automated digital image forensics tool
A network forensics toolkit that transforms network traffic data into graph-based representations for interactive analysis and visualization through a web interface.
A Hadoop library for reading and querying PCAP files
Analyse a forensic target to find and report files found and not found in hashlookup CIRCL public service.
HexPrism is a fast, privacy-first hex editor built for CTFs and digital forensics.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI