You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+6-14Lines changed: 6 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,9 +18,7 @@ Joachim Metz also released a cross-platform, LGPL licensed C++ based parser in 2
18
18
19
19
Dependencies
20
20
------------
21
-
python-evtx was developed using the 2.7 tag of the Python programming language. As it is purely Python, the module works equally well across platforms. The code does not depend on any modules that require separate compilation.
22
-
23
-
python-evtx is not yet Python 3 compatible; however, I do not expect a port to be particularly painful.
21
+
python-evtx works on both the 2.7 and 3.x versions of the Python programming language. As it is purely Python, the module works equally well across platforms. The code does not depend on any modules that require separate compilation; however, if you have lxml installed, its even nicer.
24
22
25
23
python-evtx operates on event log files from Windows operating systems newer than Windows Vista. These files typically have the file extension .evtx. Version 5.09 of the `file` utility identifies such a file as "MS Vista Windows Event Log". To manual confirm the file type, look for the ASCII string "ElfFile" in the first seven bytes:
26
24
@@ -35,12 +33,11 @@ Provided with the parsing module `Evtx` are three scripts that mimic the tools d
35
33
36
34
Note the length of the `evtxdump.py` script: its only 20 lines. Now, review the contents and notice the complete implementation of the logic:
@@ -53,11 +50,6 @@ Updates to python-evtx are pushed to PyPi, so you can install the module using e
53
50
54
51
The source code for python-evtx is hosted at Github, and you may download, fork, and review it from this repository (http://www.github.com/williballenthin/python-evtx). Please report issues or feature requests through Github's bug tracker associated with the project.
55
52
56
-
57
-
Hacking
58
-
-------
59
-
60
-
61
53
License
62
54
-------
63
55
python-evtx is licensed under the Apache License, Version 2.0. This means it is freely available for use and modification in a personal and professional capacity.
0 commit comments