data in records of pyevtx and <EventData> xml node

libyal / libevtx

Library and tools to access the Windows XML Event Log (EVTX) format

GNU Lesser General Public License v3.0

188 stars 49 forks source link

data in records of pyevtx and <EventData> xml node #9

Closed patatetom closed 6 years ago

patatetom commented 7 years ago

hi Joachim, will data attribute of apyevtx.record object be the same thing as <EventData> xml node ? if not, how can I get just <EventData> node without playing xml on xml_string attribute ? regards, lacsaP.

joachimmetz commented 7 years ago

You likely want pyevtx.record.strings