dissect.eventlog#

Submodules#

Package Contents#

Classes#

Evt

Windows Event files for WinOS up until Windows XP

Evtx

Microsoft Event logs

CRIM

Start header of the WEVT_TEMPLATE
class dissect.eventlog.Evt(fh)#

Windows Event files for WinOS up until Windows XP

__iter__()#
class dissect.eventlog.Evtx(fh, path=None)#

Microsoft Event logs

__iter__()#
exception dissect.eventlog.BxmlException#

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.eventlog.Error#

Bases: Exception

Common base class for all non-exit exceptions.

exception dissect.eventlog.MalformedElfChnkException#

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.eventlog.UnknownSignatureException#

Bases: Error

Common base class for all non-exit exceptions.

class dissect.eventlog.CRIM(fh: io.BufferedReader)#

Start header of the WEVT_TEMPLATE Holds the number of providers inside the template

property file_size#

Return size of the whole file.

wevt_headers()#

Get the WEVT object for a specific provider