How to Install and Uninstall grokevt Package on Kali Linux

Last updated: February 24,2025

1. Install "grokevt" package

In this section, we are going to explain the necessary steps to install grokevt on Kali Linux


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                grokevt
            
                    
    
    Copied

2. Uninstall "grokevt" package

Here is a brief guide to show you how to uninstall grokevt on Kali Linux:


    
        
            $
        

        
            
                sudo apt remove
            
                        
                grokevt
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the grokevt package on Kali Linux

Package: grokevt
Version: 0.5.0-5
Installed-Size: 121
Maintainer: Debian Security Tools
Architecture: all
Depends: reglookup, python3-pyregfi, python3:any
Size: 35224
SHA256: 3e439c81e9751b562718121f7b98deeedd4d4630c4d2d164b430a62026064971
SHA1: be329766f9de0e84b00881e70764dbb12464a2c9
MD5sum: ca320c6bcf2c7baa6032927137b20648
Description: scripts for reading Microsoft Windows event log files
GrokEVT is a collection of scripts built for reading Microsoft Windows
NT/2000/XP/2003 event log files.
.
Currently the scripts work together on one or more mounted Microsoft Windows
partitions to extract all information needed (registry entries, message
templates, and log files) to convert the logs to a human-readable format.
.
This program is useful in forensics investigations.
Description-md5:
Homepage: http://projects.sentinelchicken.org/grokevt/
Tag: admin::logging, interface::commandline, role::program,
security::forensics, security::log-analyzer, use::converting,
works-with::logfile
Section: utils
Priority: optional
Filename: pool/main/g/grokevt/grokevt_0.5.0-5_all.deb