wtmp

A little post-exploit tool that carefully clean *NIX access logs

A tool for dumping wtmp files and patching wtmp records

LogAnalysisTool: provide a new approach for pattern attack search and for calculation of severity of logins in Linux's Wtmp, Btmp and Secure log. Searched patterns: Brute Force, Password Spraying. Also check of IPWhois and Reputation. Plus utility functions.

Using utmpx.h, LoginRecords Allows you to parse UTMP, WMTP and BTMP files on Linux

Parsing utmp file

Python Windows Automation, a scripting utility designed to streamline task execution and system control on Microsoft Windows operating systems. It provides a seamless user experience to help developers automate repetitive workflows, manage OS processes, and boost productivity efficiently.

Linux Authentication Artifact Parser - Parse legacy wtmp/btmp/utmp, wtmpdb, auth.log, and systemd journal files for digital forensics investigations.

WuTamp is a forensic tool designed to parse corrupted `wtmpx` and `utmpx` files from Solaris hosts. Attackers may intentionally corrupt these log files, sometimes by inserting bytes at the beginning of the file to disrupt SPARC 4-byte alignment, or by overwriting/deleting usernames and hostnames within the record entries.

Clean Linux auth logs by removing utmp, wtmp, btmp, and lastlog records while keeping file metadata intact