XL-Parser

What is it

XL-Parser is a tool for data extraction and analysis. Input can be a directory, a file or multiple files, or the clipboard.

  • File formats: XL-Parser supports many file formats like plain text, unicode, text inside binaries, doc and docx, xls and xlsx, evt and evtx, pdf, msg and text inside zip files. You can even extract a file using a different parser. For example, you can extract data from a docx file, but open it as a zip, so you will have access to xml file inside it.
  • File filters: If the input is a directory, you can include the subfolder or not. You can also set a combinaison of filters: keyword or regex that match filename, size of the file, last modified time or last accessed time. Your combinaison of filters can be save for a later use.
  • Extraction: You can extract data using a combinaison of keyword or regex or use the special objects already set which are: IPv4, IPv6, URLs, Emails, Hostnames, Domain names, MAC addresses or credit card numbers. XL-Parser provides a lot of options for extraction and for report.
  • Web log analysis: One specialty of XL-Parser is web log analysis. When you analyse web logs, you can extract data using anything that is in the logs. For example, you can extract all requests related to a particular IP address, but you cannot search for requests related to an ISP, because this information is not in the log. XL-Parser provides you the way to do this and much more. First, XL-Parser will help you parse the log and build a SQlite database from it. When it's done, XL-Parser provides a bunch of functions to query the database and find suspicious activities. Cool!
  • Split logs: This goal of this function is to split logs but it can be used to split any text file, if you want to preserve the integrity of each line.

See documentation for more details.

Screenshots

XL-Parser - Extract - Special objects

XL-Parser - Extract - Special objects
Click image to view in full size
XL-Parser - Files - Web log analysis

XL-Parser - Files - Web log analysis
Click image to view in full size
XL-Parser - Split Logs

XL-Parser - Split Logs
Click image to view in full size
XL-Parser - Window - Expression

XL-Parser - Window - Expression
Click image to view in full size
XL-Parser - Window - Expression tool

XL-Parser - Window - Expression tool
Click image to view in full size
XL-Parser - Window - Extract Expression options

XL-Parser - Window - Extract Expression options
Click image to view in full size
XL-Parser - Files - Extraction results

XL-Parser - Files - Extraction results
Click image to view in full size
XL-Parser - Window - Extraction report options

XL-Parser - Window - Extraction report options
Click image to view in full size
XL-Parser - Window - Log format database

XL-Parser - Window - Log format database
Click image to view in full size
XL-Parser - Window - Log format database - Add

XL-Parser - Window - Log format database - Add
Click image to view in full size
XL-Parser - Window - Log Analysis Filters

XL-Parser - Window - Log Analysis Filters
Click image to view in full size
XL-Parser - Window - Log Analysis Filters - Add

XL-Parser - Window - Log Analysis Filters - Add
Click image to view in full size
XL-Parser - Window - Log Analysis Field Filters

XL-Parser - Window - Log Analysis Field Filters
Click image to view in full size
XL-Parser - Window - Log Analysis Progress

XL-Parser - Window - Log Analysis Progress
Click image to view in full size
XL-Parser - Database - Query

XL-Parser - Database - Query
Click image to view in full size
XL-Parser - Window - Saved Queries database

XL-Parser - Window - Saved Queries database
Click image to view in full size
XL-Parser - Window - Query database report options

XL-Parser - Window - Query database report options
Click image to view in full size
XL-Parser - Database - Suspicious activities

XL-Parser - Database - Suspicious Activities
Click image to view in full size
XL-Parser - Window - Suspicious activities

XL-Parser - Window - Suspicious Activities
Click image to view in full size

How it works

XL-Parser can be installed using the installer or used as a standalone application. In order to start using it, just run the executable file from the start menu or the directory you install it.

If you installed it, you can also start the tool using the link in the Send To folder after right-clicking on any folder or file(s).

What do you need

  • Windows XP SP2 or newer

Version History

Version Comments
1.1.1
  • Fixed: Issue with the use of operators in Extraction function (for expressions).
  • Fixed: Issues related to the use of non-ascii characters in filename.
  • Fixed: Display bug in the Query Database tab.
1.1
  • New: Reset function added to File Formats.
  • New: Reset function added to Suspicious activities.
  • New: In Extraction Results, a new function to get results only, without duplicates.
  • New: The Request length indicator in Suspicious activities was splitted in two: Request length (nbr), Request length (max).
  • Fixed: When editing a single expression, the operator was changes for OR.
  • Fixed: Expression window, when saving an expression, expression was saved but error occured.
  • Fixed: After a database and its files were moved, saved results file was crashing.
1.0 First release.

Translation

To translate XL-Parser to other languages:

  1. In Config Window, use the Export Lang.ini function. The file will be saved in the same directory of the tool;
  2. Open the file in any text editor like Notepad;
  3. Translate each expression at the right of the = symbol;
    • The expression on the left side is used by the tool to identify the expression so do not change it. Also, be sure to have a space between the = symbol and your expression (ex. Key = Value);
    • Authorized characters are alphanumerics, spaces and these symbols: ",", ".", "-", "!", ",", "(" and ")". Any other character will be deleted;
    • For some controls, string length must be the same as original. A longer string could be truncated if it doesn't match the length of the field;
    • The value associated with the translatorName will be used in the About window to identify you as translator (if you want). You can also add your email or a short url (ex. YourName (youraddress@email.com));
  4. Restart the tool so the strings in Lang.ini will be used instead of the default language.

If you translate the tool and you want to share, contact the author.

Available translations:

To install, save the appropriate Lang.ini file in the default folder of the tool (if you used the installer, it should be AppData. Otherwise, it's the same folder of the program).

No translation available for the moment.

Known Problems

  • No known problem for now.

License

Copyright (C) 2015-2017 Alain Rioux

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.

Feedback

If you have any problem, suggestion, comment, or you found a bug in the utility, contact the author.

Credits

  • For database:
  • For icons:
    • The main logo of XL-Parser has been created by Oxygen Team on term of the GNU Lesser General Public License.
    • Big filter list icon has been created by Double-J Design and is distributed on term of the CC Attribution-No Derivative 4.0 license.
    • Big config icon used in option windows has been created by IconLeak and is distributed as Linkware.
    • A lot of icons used for buttons come from the Blue Bits collection of Icojam (licensed as "Public Domain") like config, about, open file, delete, check update, import database, etc.
    • A lot of icons used for buttons come from the Farm Fresh Icons collection by Fatcow Web Hosting and are distributed on term of the CC Attribution 4.0 license.
    • Open folder icon, clipboard icon, open regex tool icon, has been created by PixelMixer and is distributed as freeware.
    • Filter icons (add, edit, delete) come from the Fugue Icons collection by Yusuke Kamiyamane (http://p.yusukekamiyamane.com) and are licensed under a Creative Commons Attribution 3.0 License.
    • Small up and down arrows has been created by Oxygen Team on term of the GNU Lesser General Public License.
    • Down arrow in Log format window has been created by VirtualLNK and is distributed as Linkware.
    • The "Open folder in Explorer" icon comes from Danish Royalty Free Icons by Jonas Rask Designand is distributed as Freeware.
    • The icon used for Process button has been created by Saki (Alexandre Moore) and is distributed on term of the GNU General Public License.
    • Stop icon has been created by emey87 (Manuel Lopez) and is distributed on term of the CC Attribution-No Derivative 4.0 license.
    • Documentation icon has been created by Oxygen Team on term of the GNU Lesser General Public License.
    • The check icon used in Configuration Wizard has been created by Cheezen (Anders Bjarnle) and is distributed as freeware.
    • The icon (128x128) used in Save query window comes from Yellowicon, has been created by Everaldo and is distributed on term of the GNU Lesser General Public License.

Download

Source code is hosted on SourceForge and GitHub. Binaries are hosted on SourceForge.

Download 
			XL-Parser

If you want to download the standalone version or an older version, check on SourceForge.

Additional content
Log format Database This database is used for Web Log Analysis.
Datetime Database This database is used in Log format database function and with the Split Logs function.
Custom Function - Resolve TLD This function is used with Special objects extraction.

 

Credits to Free Website Templates for the template of this Website