How To Install python-evtx on Debian 9

In this tutorial we learn how to install python-evtx on Debian 9. python-evtx is parser for recent Windows Event Log files – Python 2 version

Introduction

In this tutorial we learn how to install python-evtx on Debian 9.

What is python-evtx

python-evtx is:

This module provides programmatic access to the File and Chunk headers, record templates, and event entries from Microsoft Windows Vista and later.

This package contains modules for Python 2.

There are three methods to install python-evtx on Debian 9. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install python-evtx Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install python-evtx using apt-get by running the following command:

sudo apt-get -y install python-evtx

Install python-evtx Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install python-evtx using apt by running the following command:

sudo apt -y install python-evtx

Install python-evtx Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install python-evtx using aptitude by running the following command:

sudo aptitude -y install python-evtx

How To Uninstall python-evtx on Debian 9

To uninstall only the python-evtx package we can use the following command:

sudo apt-get remove python-evtx

Uninstall python-evtx And Its Dependencies

To uninstall python-evtx and its dependencies that are no longer needed by Debian 9, we can use the command below:

sudo apt-get -y autoremove python-evtx

Remove python-evtx Configurations and Data

To remove python-evtx configuration and data from Debian 9 we can use the following command:

sudo apt-get -y purge python-evtx

Remove python-evtx configuration, data, and all of its dependencies

We can use the following command to remove python-evtx configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge python-evtx

Dependencies

python-evtx have the following dependencies:

References

Summary

In this tutorial we learn how to install python-evtx package on Debian 9 using different package management tools: apt, apt-get and aptitude.