Le-tools.com Forum Contact
RDP-Parser

Description

What is it

RDP-Parser extracts RDP activities from Microsoft Windows Event Logs. This tool has been designed for any investigation involving exploitation of RDP service. It supports Evt and Evtx formats.

Screenshots

RDP-Parser Main Window

Version History

Version Comments
2.0
2019-06-04
New:
  • New: The new version include an installer and a GUI. See documentation for more information about the new options and features.
1.1
2018-12-09
New:
  • Extraction of Event IDs 131 and 140 from Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx
Fixed:
  • Details were not correctly extracted for event 56 and 1149 with types 2, 4 or 5.
1.0
2018-09-23
First release.

Translation

To translate RDP-Parser to other languages:

If you translate the tool and you want to share, contact the author.

Available translations:

To install, save the appropriate Lang.ini file in the default folder of the tool (if you used the installer, it should be AppData. Otherwise, it's the same folder of the program).

No translation available for the moment.

Known Problems

License

Copyright (c) 2018-2019 Alain Rioux (le-tools.com)

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.

Credits

Download

Source code is hosted on SourceForge and GitHub. Binaries are hosted on SourceForge.

Filename MD5 SHA256
RDP-Parser 2.0 Setup.exe 2a0f3d540a456fd8e4ce92bfc73f63ea 75fde901598b61a346375610fcb6cbf8287632cea0a2f0bd330c80a198108145
RDP-Parser 2.0.zip bc99451493f359a554da8eb8bc9c4812 931ccb18c767e3f877e9e896015805153884e0a719b03c314cf1d6b8fec38c69
RDP-Parser 1.1.zip 143e3d5b91e7e8839c8c4c49dfd0bdd0 864b715ca58f1216472f3cb6d8b7899eb575c0e901da0158780b1ab4919ab1ed

Download 
	RDP-Parser

If you want to download the standalone version or an older version, check on SourceForge.

Copyright (c) 2015-2019 Alain Rioux