williballenthin / python-evt

Pure Python parser for classic Windows Event Log files (.evt)
Apache License 2.0
48 stars 11 forks source link

Docs and output to XML #3

Open geekscrapy opened 7 years ago

geekscrapy commented 7 years ago

Hi do you have any docs on how to use this lib? Also, any plans to make it dump to xml like evtx_dump.py . Would be pretty handy... TIA!

williballenthin commented 7 years ago

The best examples for using this library are in the lfle project (eg. here). You'll see some tools for extracting and rendering records from .evt files. While I've provided csv and bodyfile formats, I haven't attempted an XML format. If you are able to put this together, I'd be happy to merge this into the repository.