python-evt icon indicating copy to clipboard operation
python-evt copied to clipboard

Docs and output to XML

Open geekscrapy opened this issue 8 years ago • 1 comments

Hi do you have any docs on how to use this lib? Also, any plans to make it dump to xml like evtx_dump.py . Would be pretty handy... TIA!

geekscrapy avatar Aug 17 '17 23:08 geekscrapy

The best examples for using this library are in the lfle project (eg. here). You'll see some tools for extracting and rendering records from .evt files. While I've provided csv and bodyfile formats, I haven't attempted an XML format. If you are able to put this together, I'd be happy to merge this into the repository.

williballenthin avatar Aug 18 '17 14:08 williballenthin