Struct evtx::EvtxRecord

pub struct EvtxRecord<'a> {
    pub chunk: &'a EvtxChunk<'a>,
    pub event_record_id: u64,
    pub timestamp: DateTime<Utc>,
    pub tokens: Vec<BinXMLDeserializedTokens<'a>>,
    pub settings: Arc<ParserSettings>,
}

Fields

chunk: &'a EvtxChunk<'a>

event_record_id: u64

timestamp: DateTime<Utc>

tokens: Vec<BinXMLDeserializedTokens<'a>>

settings: Arc<ParserSettings>

Implementations

impl<'a> EvtxRecord<'a>

pub fn into_output<T: BinXmlOutput>(self, output_builder: &mut T) -> Result<()>

Consumes the record, processing it using the given output_builder.

pub fn into_json_value(self) -> Result<SerializedEvtxRecord<Value>>

Consumes the record, returning a EvtxRecordWithJsonValue with the serde_json::Value data.

pub fn into_json(self) -> Result<SerializedEvtxRecord<String>>

Consumes the record and parse it, producing a JSON serialized record.

pub fn into_xml(self) -> Result<SerializedEvtxRecord<String>>

Consumes the record and parse it, producing an XML serialized record.

Trait Implementations

impl<'a> Clone for EvtxRecord<'a>

fn clone(&self) -> EvtxRecord<'a>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for EvtxRecord<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.