https://github.com/alshadex/evtxreader

The Python Windows .evtx log file parser module
https://github.com/alshadex/evtxreader

evtx logging parser pip windows

Last synced: about 1 month ago
JSON representation

The Python Windows .evtx log file parser module

• Host: GitHub
• URL: https://github.com/alshadex/evtxreader
• Owner: Alshadex
• Created: 2020-11-26T05:12:24.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2024-06-05T09:16:41.000Z (7 months ago)
• Last Synced: 2024-06-05T10:38:48.661Z (7 months ago)
• Topics: evtx, logging, parser, pip, windows
• Language: Python
• Homepage:
• Size: 548 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        

# Python Evtx Module

Python module for reading Windows Evtx files.

This file holds hard coded offsets from [here](https://github.com/libyal/libevtx/blob/master/documentation/Windows%20XML%20Event%20Log%20%28EVTX%29.asciidoc#file_flags).

## Development

For development, start a venv and do:

```

$ pip3 install -e .

```

This will enable edit mode which is basically a hot reload version.

## Testing

For running pytest, first do:

```

$ pip3 install -e .[test]

```

Then run:

```

$ pytest

```

or

```

$ pytest --file path/to/file.evtx

```