Can anybody help me to solve this problem?

Question

0.00/5 (No votes)

See more:

Problem: I just can't edit the *.evt file. I have tool to parser it. But, I want to edit it,not just to"see" it.
Guys,It will be very thankful if anybody help me!

What I have tried:

Hi,guys.First of all,I'M not a IT,and I'm come from china. Before this week,I find a problem.I have search all infomation in chinese internet,but i can't find the answer. Now,i need help from your guys.

Posted 10-Jul-16 17:02pm

Member 12625960

Updated 10-Jul-16 23:27pm

Add a Solution

Comments

Garth J Lancaster 10-Jul-16 23:27pm

Welcome ... you may wish to use the green 'Improve question' link to add some information that would be useful for us to help you - for example, what is the source of the .evt file (ie, what is is used for - just assuming '.evt' has a standard meaning may be dangerous) .. what is this parser you speak of ? can you provide an example of the data, maybe as an ascii/hex dump ?

Member 12625960 12-Jul-16 4:35am

Thanks for your reply.The *.evt is a file type which generate by windows eventlog. The parse tool is come from"http://www.codeproject.com/Articles/15288/Parsing-event-log-evt-file".

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Richard MacCutchan · Answer 1 · 2016-07-10T23:27:00

Solution 1

You need to find an existing product, or write one for yourself. See Windows Event Log (EVT) - ForensicsWiki[^] for information on the structure of these files.

Posted 10-Jul-16 23:27pm

Richard MacCutchan

Comments

Member 12625960 12-Jul-16 4:41am

I don't know how to write a code,bro.I have just search chinese internet,but i can't find an existing product.I'll be very thankful if you can find an product for me.

Richard MacCutchan 12-Jul-16 4:59am

Sorry, that is what Google is for.