italy uk

pconoff is a script to parse System.evtx and Security.evtx files to track PC activity such as start, stop, suspend mode, user logon/logoff and so on.

It is a combination of two scripts: the first is a batch script that parse the command line input which will be sent to the second script, a powershell script that parse the file with the Get-WinEvent cmdlet. The output is a comma separated CSV file (Export-Csv cmdlet).

It is released under the GPLv3.

You can get the scripts here.