winevt-memory 0.1.0

Carve Windows Event Log (EVTX) records and chunks from memory images.
Documentation