wevtail favicon

wevtail

About wevtail

wevtail follows Windows event log channels live (push-based, no polling) through the Win32 EvtSubscribe API — like tail -f, but for the event log. It supports following multiple channels at once, colorized or JSON-lines output, XPath filtering, .evtx file replay, and remote-host tailing.

Download

Information

PublisherLdogg123
Version0.1.1
Package IDLdogg123.wevtail
Website View Site
Source View Source