windows-eventlog-native 0.2.2

Native Windows Event Log querying and structured XML parsing for DFIR, detection engineering, and security research.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
#
# When uploading crates to the registry Cargo will automatically
# "normalize" Cargo.toml files for maximal compatibility
# with all versions of Cargo and also rewrite `path` dependencies
# to registry (e.g., crates.io) dependencies.
#
# If you are reading this file be aware that the original Cargo.toml
# will likely look very different (and much more reasonable).
# See Cargo.toml.orig for the original contents.

[package]
edition = "2021"
rust-version = "1.85"
name = "windows-eventlog-native"
version = "0.2.2"
authors = ["zevs"]
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "Native Windows Event Log querying and structured XML parsing for DFIR, detection engineering, and security research."
documentation = "https://docs.rs/windows-eventlog-native"
readme = "README.md"
keywords = [
    "windows",
    "eventlog",
    "dfir",
    "forensics",
    "security",
]
categories = [
    "os::windows-apis",
    "parser-implementations",
    "api-bindings",
]
license = "MIT"
repository = "https://github.com/icedracon/windows-eventlog-native"

[lib]
name = "windows_eventlog_native"
path = "src/lib.rs"

[[example]]
name = "recent_security_events"
path = "examples/recent_security_events.rs"

[[test]]
name = "smoke_query"
path = "tests/smoke_query.rs"

[[test]]
name = "xml_parse"
path = "tests/xml_parse.rs"

[[test]]
name = "xpath_builder"
path = "tests/xpath_builder.rs"

[dependencies.chrono]
version = "0.4"
features = [
    "std",
    "clock",
    "serde",
]
default-features = false

[dependencies.quick-xml]
version = "0.41"

[dependencies.thiserror]
version = "2"

[target."cfg(not(windows))".dependencies]

[target."cfg(windows)".dependencies.win32-min]
version = "0.1.2"
features = ["eventlog"]