evtx 0.11.0

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
Documentation
[[bench]]
harness = false
name = "benchmark"
path = "src/benches/benchmark.rs"

[[bench]]
harness = false
name = "json_text_content"
path = "src/benches/json_text_content.rs"
required-features = ["bench"]

[[bench]]
harness = false
name = "tree_build"
path = "src/benches/tree_build.rs"
required-features = ["bench"]

[[bin]]
name = "bench_evtx_dump_loop"
path = "src/bin/bench_evtx_dump_loop.rs"

[[bin]]
name = "bench_tree_build"
path = "src/bin/bench_tree_build.rs"

[[bin]]
name = "bench_tree_build_direct"
path = "src/bin/bench_tree_build_direct.rs"

[[bin]]
name = "bench_utf16_escape_matrix"
path = "src/bin/bench_utf16_escape_matrix.rs"

[[bin]]
name = "evtx_dump"
path = "src/bin/evtx_dump.rs"
required-features = ["evtx_dump"]

[build-dependencies.skeptic]
version = "0.13.7"

[dependencies.ahash]
version = "0.8"

[dependencies.anyhow]
optional = true
version = "1"

[dependencies.bitflags]
version = "2"

[dependencies.bumpalo]
features = ["collections"]
version = "3.19.1"

[dependencies.byteorder]
version = "1"

[dependencies.clap]
optional = true
version = "4"

[dependencies.crc32fast]
version = "1"

[dependencies.dialoguer]
optional = true
version = "0.12"

[dependencies.encoding]
version = "0.2.33"

[dependencies.glob]
optional = true
version = "0.3"

[dependencies.goblin]
optional = true
version = "0.10"

[dependencies.indoc]
optional = true
version = "2"

[dependencies.jiff]
features = ["logging", "serde"]
version = "0.2.17"

[dependencies.log]
features = ["release_max_level_debug"]
version = "0.4.17"

[dependencies.rayon]
optional = true
version = "1"

[dependencies.serde]
version = "1"

[dependencies.serde_json]
features = ["preserve_order"]
version = "1"

[dependencies.simplelog]
optional = true
version = "0.12.0"

[dependencies.sonic-rs]
version = "0.5.6"

[dependencies.tempfile]
optional = true
version = "3.3.0"

[dependencies.thiserror]
version = "2"

[dependencies.utf16-simd]
features = ["sonic-writeext"]
version = "0.1.0"

[dependencies.winstructs]
version = "0.3.0"

[dependencies.zmij]
version = "1.0.1"

[dev-dependencies.assert_cmd]
version = "2.1.1"

[dev-dependencies.criterion]
version = "0.8.1"

[dev-dependencies.env_logger]
version = "0.11.0"

[dev-dependencies.insta]
features = ["json"]
version = "1"

[dev-dependencies.predicates]
version = "3.1"

[dev-dependencies.pretty_assertions]
version = "1.2.1"

[dev-dependencies.tempfile]
version = "3.3.0"

[features]
bench = []
default = ["multithreading", "evtx_dump"]
evtx_dump = ["simplelog", "clap", "dialoguer", "indoc", "anyhow", "tempfile", "wevt_templates"]
fast-alloc = ["tikv-jemallocator", "rpmalloc"]
multithreading = ["rayon"]
wevt_templates = ["glob", "goblin"]

[lib]
name = "evtx"
path = "src/lib.rs"

[package]
authors = ["Omer Ben-Amram <omerbenamram@gmail.com>"]
autobenches = false
autobins = false
autoexamples = false
autolib = false
autotests = false
build = false
description = "A Fast (and safe) parser for the Windows XML Event Log (EVTX) format"
edition = "2024"
exclude = ["**/*.evtx", "**/*.dat"]
homepage = "https://github.com/omerbenamram/EVTX"
license = "MIT/Apache-2.0"
name = "evtx"
readme = "README.md"
repository = "https://github.com/omerbenamram/EVTX"
version = "0.11.0"

[profile.release]
codegen-units = 1
lto = "thin"
opt-level = 3

[target.'cfg(not(target_os = "windows"))'.dev-dependencies.rexpect]
version = "0.6.0"

[target."cfg(not(windows))".dependencies.tikv-jemallocator]
optional = true
version = "0.6.0"

[target."cfg(windows)".dependencies.rpmalloc]
optional = true
version = "0.2.2"

[[test]]
name = "fixtures"
path = "tests/fixtures.rs"

[[test]]
name = "test_cli"
path = "tests/test_cli.rs"

[[test]]
name = "test_cli_interactive"
path = "tests/test_cli_interactive.rs"

[[test]]
name = "test_full_samples"
path = "tests/test_full_samples.rs"

[[test]]
name = "test_full_samples_streaming"
path = "tests/test_full_samples_streaming.rs"

[[test]]
name = "test_record_id_public"
path = "tests/test_record_id_public.rs"

[[test]]
name = "test_record_samples"
path = "tests/test_record_samples.rs"

[[test]]
name = "test_streaming_eventdata_aggregated"
path = "tests/test_streaming_eventdata_aggregated.rs"

[[test]]
name = "test_wevt_cache_fallback"
path = "tests/test_wevt_cache_fallback.rs"

[[test]]
name = "test_wevt_templates"
path = "tests/test_wevt_templates.rs"