Repository navigation
Evtx files with different extension #75
Description
Activity
As in supporting other event log formats that are not evtx? Or handling evtx files that do not have the evtx extension?
I mean handling evtx files that do not have the evtx extension
Reacted by Alex KornitzerAwesome, cause that is on the list for v2, extension will no longer matter. It can be easily backported to v1 too to be honest.
This is addressed in v2.0.0-alpha.0
I can see that chainsaw only supports files with
evtxextension.https://github.com/countercept/chainsaw/blob/master/src/util.rs#L56
Would it be possible to add a command line argument to check for a different file extension ?
thanks !