1. Home
  2. 🔧 Utilities
  3. EVTX Reader
  4. Reviews

EVTX Reader User Reviews

EVTX Reader
EVTX Reader
Yoram Snir
🔧 Utilities
🛠️ Developer Tools

Is EVTX Reader Safe?

Not enough ratings yet to assess EVTX Reader.

Is EVTX Reader Legit?

EVTX Reader appears to be a legitimate app. AppsHunter Legitimacy Score for EVTX Reader is 83/100.

Based on 83 of 100 points across 7 verification signals from App Store and developer data.

Top reviews

Most RecentHighest RatedLowest Rated

Crashes within 2 minutes of opening on Macos Ventura

Completely unusable. Crashes after 2 minutes every time.
cologuppycologuppy

Response from developer

Sorry to hear that cologuppy. You can send me a file that is crashing the App and I will try my best to solve this specific issue.

Works, but has serious performance and usability issues.

I just want to filter to events matching a specific eventID. Yet the tool has only one search field and seems to try to search all the data for each event in trying to find matches.

This results in searches that run far too long for what I have patience for. All I want to do is simply filter on one attibute of the event (eventID), I don't want that search to run against all the other text and data.

I should also be able to filter events within a certain time range, so that it doesn't search all events outside the time range I care about.
Show more
AlaiaVee75AlaiaVee75

Had issues but developer is very reponsive

Yes, it is true that EVTX Reader crashed when I tried to open a couple of evtx files, but instead of slapping a bad review I contacted the developer and he fixed the issue in a day and released the update. If you encounter the problem please do the same and we'll all be better off. :)
RibosomRibosom

App Crashed...

Just bought it to view logs ...

apple crashed...

Process: EVTX Reader [93162]
Path: /Applications/EVTX Reader.app/Contents/MacOS/EVTX Reader
Identifier: com.YoramSnirSoftwareConsulting.EVTX-Reader
Version: 1.17 (19)
App Item ID: 1236583721
App External ID: 838174761
Code Type: X86-64 (Native)
Parent Process: ??? [1]
Responsible: EVTX Reader [93162]
User ID: 501

Date/Time: 2021-04-06 21:41:01.393 0200
OS Version: Mac OS X 10.15.7 (19H15)
Report Version: 12
Bridge OS Version: 3.0 (14Y908)
Anonymous UUID: CD084445-F100-8E9D-9BFD-D8C536A32670

Sleep/Wake UUID: 5B1FBB8C-F2C8-449C-A1C3-C28C5D79ED49

Time Awake Since Boot: 230000 seconds
Time Since Wake: 1800 seconds

System Integrity Protection: enabled

Crashed Thread: 0 Dispatch queue: com.apple.main-thread

Exception Type: EXC_BAD_INSTRUCTION (SIGILL)
Exception Codes: 0x0000000000000001, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY

Termination Signal: Illegal instruction: 4
Termination Reason: Namespace SIGNAL, Code 0x4
Terminating Process: exc handler [93162]
Show more
SNekosSNekos

Not functional

App crashes immediately when I try to open an .evtx file. Don't waste your money like I did.
>K-Ry<>K-Ry<

App crashes all the time.

If I switch to Errors tab it crashes immediately. Search function doesn't work at all and after 10-15s app crashes as well.
RoigTechRoigTech

Response from developer

Dear RoigTech, The app is opening fast the file, then slowly reading the content of this undocumented file-format. I guess there is a type of event I have never seen before in that specific file. Sorry, Yoram

Wont open anything.

Unexpeditly quits when ever I try to open an evtx file….
DrBooDrBoo

Response from developer

Thank you for trying EVTX Reader. You can contact me by email, so I can try to help figure this issue. I would recommend to try open the application first and open a file using the Open menu (I had a report from a user that had an issue opening files by double clicking).

Doesn’t work for all EVTX files

This seems like a promising tool, but still needs a bit of refinement. It worked for Windows 7, but not for Windows 2008R2 event files. I haven’t tested it with any others.
fernan_mayfernan_may

Response from developer

Thank you for using EVTX Reader. As this file format is undocumented, I find some files unreadable from time to time. I actually did not test it with Windows 7, but only Windows Server 2008 R2 and Windows Server 2016. If your event log file does not include information that restrict you from sending it to me, you can find a link to my email on the product web site. I will be happy to improve the App for you and any other user. Thank you, Yoram