omerbenamram / evtx

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
Apache License 2.0
652 stars 62 forks source link

Read the entire template cache upfront #72

Closed ohadravid closed 4 years ago

ohadravid commented 4 years ago

@omerbenamram read the spec again, and we decided to read the entire template cache upfront, increasing the "cache hits" for the templates (== always, unless the file is dirty).

Perf should be improved by about ~20%~ (5%-10%), and some Cows and lifetime bound could be removed.