pyEVD

Import of CyberArk EVD exported data to a SQLite database using Python

CyberArk provide, out of the box, the script and command file to create the database structure and import the data using bcp and MSSQL. This script does the same thing but without the MSSQL server OS, hardware, licenses and other complications!

This simple script will scan the evd_files_location variable as a directory looking for reports partially named:-

FilesList

LogList

OwnersList

RequestsList

SafesList

GroupsList

GroupMembersList

UsersList

LocationsList

ConfirmationsList

Italogfile

EventsList

ObjectProperties

MasterPolicySettings

If, in your EVD export, you append a datetime stamp as I do, then as long as "FilesList" (for example) still appears in the filename somewhere it will be found.

Change the evd_files_location variable in the script to your value or create a C:\EVD directory and put your EVD export files in there.

The script uses tqdm https://github.com/tqdm/tqdm as a progress bar so you will need to have that module available before running the script.

The output database pyEVD.db is saved the location of the EVD export files themselves, default C:\EVD