is it possible for Autopsy to parse only a directory of EVTX files taken from a machine.
if so how ? i love to set the events in timeline
Autopsy does not currently support parsing of EVTX files and adding that capability is not part of the plan for the next few releases. Sorry, @pooms.