EricZimmerman / evtx

C# based evtx parser with lots of extras
MIT License
280 stars 59 forks source link

Pass event ID ranges #230

Closed gregkutzbach closed 1 year ago

gregkutzbach commented 1 year ago

EvtxECmd version The version of EvtxECmd you are currently using 1.5.0.0

Is your feature request related to a problem? Please describe. A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] Sometimes I want to look at 100 or so event ID's. I don't want to take the time to make a list. It would be much faster to say 700-800 instead of 700,701,702,...,800

Describe the solution you'd like A clear and concise description of what you want to happen. Allow event ID ranges to be added inline with the normal event id's

1,2,3,70-90,105,106,200-210

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered. powershell script, creating my list in excel and copying it in

Additional context Add any other context or screenshots about the feature request here.

EricZimmerman commented 1 year ago

This is done in the code. @AndrewRathbun will test and I'll release an updated binary after that.

AndrewRathbun commented 1 year ago

This is done in the code. @AndrewRathbun will test and I'll release an updated binary after that.

It works!

EricZimmerman commented 1 year ago

Will release in an hour or so. No version bump