Skip to content

Releases: 0xrawsec/golang-evtx

Library v1.2.4 & Tools

10 Jul 07:03
Compare
Choose a tag to compare

Library v1.2.3 & Tools

28 Sep 09:49
Compare
Choose a tag to compare
  • Real fix for issue #16
  • Fix for issue #17

Library & Tools Version 1.2.1

20 May 06:07
Compare
Choose a tag to compare

Library & Tools Version 1.2.0

21 Mar 21:28
Compare
Choose a tag to compare
  • Support for several forwarding in evtxdump
    • Kafka
    • HTTP
    • TCP
  • Support for go1.12 modules

Library & Tools Version 1.1.0

28 Nov 08:38
Compare
Choose a tag to compare

Description

Fixed Version 1.1 of the following tools:

  • evtxdump: utility to dump evtx files
  • evtxmon: utility to monitor evtx files and dump events as soon as they appears in the monitored EVTX file

Changes

  • Fixed uint16 overflow in chunk parsing, evtxdump is now able to parse files with 65535 chunks.
  • Fixed uint16 overflow in MonitorEvents
  • Ability to retrieve already existing events in MonitorEvents via SetMonitorExisting method of EvtxFile object
  • evtxmon able to retrieve already existing events via -e switch
  • Compresses the output when written into a file using evtxmon
  • evtxdump can display stats with the -s switch
  • The Channel attribute of an event is now accessible through a Channel() function of GoEvtxMap