{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/17"},{"label":"Security","url":"https://skillfed.io/packages/category/security/2"},{"label":"Logging","url":"https://skillfed.io/packages/category/system-logging"}],"enrichment":{"capability":"Parses Windows Event Log files (.evtx) into structured XML or JSON, providing programmatic access to event records, templates, and metadata across Windows, macOS, and Linux.","skillfed_tags":["forensics","log-analysis","windows-events"],"use_cases":["Analyze Windows Security event logs from a Linux or macOS forensic workstation","Extract and transform event log data into JSON for integration with log aggregation systems","Verify the integrity of event log chunks by checking embedded checksums","Build custom event log analysis tools that parse .evtx files programmatically","Review event templates and their structure within a log file for debugging or auditing"],"what_it_does":"python-evtx is a pure Python parser that reads Windows Event Log files in the .evtx format introduced with Windows Vista and later. It decodes the proprietary binary XML structure into accessible Python objects, allowing you to extract event records, templates, and metadata programmatically. The package works across Windows, macOS, and Linux, making it useful for analyzing Windows logs from non-Windows systems.\n\nThe parser exposes file headers, chunk structures, record templates, and individual event entries through a straightforward API. It includes command-line tools for dumping logs as XML or JSON, verifying chunk checksums, and inspecting templates. The implementation is based on documented format specifications and earlier Perl and C++ parsers, ensuring compatibility with standard .evtx files.","worth_installing":"Yes. The package is actively maintained, has no known vulnerabilities, installs with minimal friction, and uses a permissive Apache-2.0 license. It fills a specific need for cross-platform .evtx parsing with a straightforward API. Install it if you need to read Windows event logs outside Windows or integrate event log data into analysis pipelines."},"id":"python-evtx","links":{"html":"https://skillfed.io/packages/python-evtx","md":"https://skillfed.io/packages/python-evtx.md","pypi":"https://pypi.org/project/python-evtx/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-05-02","license_spdx":"Apache-2.0","license_treatment":"permissive","name":"python-evtx","python_support":"supports_current","summary":"Pure Python parser for Windows event log files (.evtx)."},"popularity":{"monthly_downloads":163514,"position":10570,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.8.1"}